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And record all your conversations. And play them back. And a whole lot more. 





Ovolab Phlink h the ultimate message 
center for your Mac. It answers phone 
calls and identifies callers using Caller ID 
and Apple's Address Book, tc greets your 
friends with personalized messages. It 
records and stores messages on your 
computer - and evert forwards voicemail 
to email as A AC audio attachments. 
Featuring multiple voice mailboxes, 
high-quality audio. Spotlight searching 
and fax capabilities, Ovolab Phlink makes 


your telephone part of the digital hub! 
And you can fully customize Ovolab 
Phlink to do exactly what you need, 
using AppleScript: even set it up to cail 
you back on your cell phone when 
important clients leave a message. 

Check rt out now at www.ovolabxom. 
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Intego VirusBarrier X4 

The acclaimed antivirus program for the Mac 










Multi-function Orb 


The change in color of the Orb 
indicates the presence of an 
infeaed or damaged file. 


© © 0 


Complete log 


ifectioi 


Choose the data to be scanned 
in the dialog box with a simple 
click. 
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scans of your volumes and 
view them m Apple’s iCal^ji j 

Decide for yourself the best 
level of security for your files 
and folders. 
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virus definitions. 


Turbo Mode technology analyzes 
your data up to 40 times faster. 
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click. 
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of viruses and repairs damaged or comjpted 
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Easily schedule, check and Install new 
virus definitrons and updates for all Intego 
software installed on your Mac, 
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• Updates via NetUpdateX4 
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AWK FOR Data Processing - Part 2 


Revving up the engine. 


L ast month, I introduced you to awk, the ‘pattern processor’. 
That laid the foundation, and merely scratched the surface of 
awk’s power. This month, we’re going to dive back into flow 
control, as we’ve seen with bash, sect, math routines, and other 
cool awk features. Of course, awk only becomes more powerful 
when combined with shell scripting and sed. 


Pattern Matching 


Now that, over tlic laM few inonihs, weVe covered 
regexp, sed, shell globbing, and now, av/k, here’s a 
word on anytime you want to use a utility chat does 
pattern matching. Sometimes you‘re not In control of 
the data yotrre going to need to sift through. However, 
there are times where, ymi are the one generating the 
dtita. This could he in the form of a report, or even from 
anotlier command-line tool In any case, try to make 
your life easier: don’t spew out unnecessary data! For 
example: you may want to find out ip addresses 
assigned to a particular interface, so yon decide to use 
ifeonfig, and write a sed script to parse the output. 
The sed script can pattern match the interface and then 
kx>p through the results kKxking for "'inet”. Not bad, but 
you decrease your work if you specity the interlace 
you're looking for to Ifconfig, If you’re using 
nireport, make sure you output fields in the order 
that you want them, ratlter than use awk to swap tliem 
around. If you need a file listing, look at all of the 
switches that w^ill sort and add symbols to the output 
that will make matching easier. Always make sure you 
read man page for any program liiat youVe using: you 
may find some surprising switches that reduce the work 
you do further down tlie chain. 

Back to Basics 

Part 1 of tills article gave us some real awk basics - 
print, match a partem, field opemtors and some biiiltdn 
variables. The built-in variables that we covered were 
NF, tlie nuinlier of fields in a record, and FS, the field 


separator. Of course, there are some more huilt-ins that we 
should know about. Let’s do that before prtx:eeding, 

FS separates fields during the input stage* By default, 
awk separates output with a space. You can define that to 
l>e anything you want, using OFS. The output field 
separator is generated by the comma in a print statement. 
So, to rewrite an example from last month, we can make the 
output look belter: 

$ Is i I awk 'BEGIN [■ 0 FS='*\t\t’* 1 (print $ 5 .$ 9 t$ir 
totiil 

182468 20050629-iocal.jpg -rw-fr- 

519S6 iChats dntfxrwx-- 

68 images drwxr-Jtr-x 

1345 jamlQg.txt rwr-r- 

61440 lads.e^e rw r'-f- 

271 103 mount 1 .260 3*wbtn.rw t-r 

352437 mr.spjc rvr-r- 

Figiitv I - Outpui Reid Scp^araior in action 

Eietter, but still a little ragged* Don't woriyl Well fix 
that in a bit. 

When you generate multi-line output, awk separates 
each record with ORS, the record separator. ORS is a 
newline by default, so each record starts on a new line. You 
can change this! Why would you want to? You can even 
define RS, the input record separator. Sometimes, small 
examples are worth 1,000 words. Tf you are processing data 
that comes in a ’block' - spread out over several lines - 
setting FS to “\n", the newline character, will allow awk 
access via the fiekl variables. Set RS to and awk will split 
these correctly when you have multiple input records. 
Practical example: you suspect a problem with user records, 
and want to search for particular users that (may) have the 
same home directory assigned. Here’s the script: 
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01. #!/bin/bash 
02 . 

03. for naae in 'dacj. localhost list /Search/Users'’ 

04. do 

05. dfici localhost 'read /Saarch/OEeEs/$fDaci 0 l | awk ^BEGTN 
$0 /\/lJears\/marczak/ [print $or 

06. done 

riftiuf 2 - User s<!arcfi script 


37417 

30334 

38334 

12965 

12965 

I5Z0I 

15201 

204 

rigiJTC 3 - Width spcdfjcrs 


btipd .coiif .bak 
ht tpd.coni.defa ult 
httpd.coni.dist 
magic 

magic.default 
mime.types 
mime.types.default 
use vs 


■ rv- r-r~ 

-rw-r-r- 
-rw- t-t- 
'tw^r-r- 
- rw’t-t- 

^rw^r-r- 

-rv-r-r- 

drwxr-xr-x 


First, you can .see it's a shell scripl. We’l! use bash to feed 
awk miilli'iine records using dscl. Line 3 sets up a loop using 
all of tlie usernames that we have access to. Line 5 uses dscl 
again to get the tietail for the username pr<ivided and feed ilia! 
record to awk. Using a BEGIN construcL we first set FS and RS. 
Theti, we look for "/Users/marezak'' anywhere in the rvmnt 
using $0, If we match, we prim the entire record. Tills way, 
we’ll print all records that have that patli as a home director)'. 
It’s a fairly specific exiiinple, but actually came in handy once. 
Plus, it illustrates handling mtilti-line records! 

Finally, in our built-in muiid up, NR and FNR, keep the 
current line numlx^r available for you. NR is cumulative, and 
FNR gives you the numlwr of the nirrent record with resped to 
the input file. Useful if you're processing multiple files. 

Low-level Format 

awk is a fantastic tfx)l fi^r generaling rept^rts, however, 
reiX3rLs are only really useful if titey look gofxl. The cLua can be 
good, but if it’s hard to read, the brain just switches off. As 
you’ve seen, OFS and print only get you so fan awk supports 
a formatted i>rint statement, printf, that you may have seen in 
some other languages, notably C. printf Ls more flexible Uian 
standard prim, but retjiiires a Nltlc more hand holding. Want an 
exami^le? Here you go: 

awk 'RRGTN Iprintf ("This is a test.\n")r 

Easy, right? So, whats diffeiienr? First, you 11 notice that you 
have to supply the newline - just like C! What 1 left out here, 
are the optional formal :i/}edjier^. which again, match their 
counterpart in C, man printf will get you the list, if you Forget 
them. Let’s learn by example. 1'he file listing code can be re^ 
written with printf like this: 

is ’1 I avk Mprititf $9. SIT 

Ihis means, print a string two tabs (‘'Xt"), a string, 

nv'o tabs and a string, followed up by a newline character. Each 
format Sfiecifier needs a corresponding value after the formal 
string to fill in the place-holder with, WeVe sul)stituting each %s 
witli a field - $5, $9 and $1, respectively. However, this really 
Ls ilic cc|uivalent of tlie earlier code - it’s still ragged! printf 
also allows you to supply the witlilt and alignment of the outpoi. 
So, to clean up our listing, we ctm use iliis: 

$ Is -1 I awk ‘NK > 1 Ipiintf "% 20s%-Z0s%-?.0s\n\$S, $9. 

$ir 

3G6 diet drwxi: xv x 

42364 httpd.conf -rw-r-r- 


That's much nicer! Explanation: instead of we can 
sfxjcify a width using “%20s” - '“20” l>eing the width. By default, 
the output is right justified in the space allolled. I added the 
hyphen - “9^>-20s" - to our example, lo left justify the text. 

Flow Control...Again 

DeyK-nding on how long you’ve been reading this column, 
youVe seen this before: weVe covered looping and decision¬ 
making in bash and in sed. Well, flow is imj>oruuu! So, let’s see 
how awk handles these constructs. 

Tlie most basic of tests is an if/then test. 'Hie pattern 
matching we've seen is essentially an if/then le.st that is applied 
to all input. However, if you’ve matched something basic, and 
then need to make further decisions, you can ust if/rhen. l^t’s 
combine this with an example using a hxip. 

A.h you may have seen in otlier languages, awk Ixis a while 
loop thai ctmdiiionally executes a block of cxxle. Here’s the idea: 

while (condition is true) ectlon 

Like Ollier languages, you can have a line f^d berween the 
condition and aaion, and if the aaion is multiple lines, they 
must l>e contained in curiy-bmees. I’m atlually going to tlirow 
a few new dungs in, and then explain. Let's re-write our user 
search script from earlier (Figure 2): 

01. JI/bin/bash 
02 . 

03. for 03iiie in 'dscl localhoet -list /Seateb/Oeere’ 

04. do 

05. dscl localhost read /,Search/lUers/$(njaTOej | awk ' 

06, BEGIN fFS="\n": 

07, $0 “ /\/lJserE\/tnarc 2 ak/ ( 

08, i-1 

09. while (1<-NF) [ 

10. if ($i - /Dir/ II Si - /IB/ II S± - /Shell/) 
print $i 

11. i++ 

12 . I 

13. i 

14. ^ 

15. dene 

Rgiinc 4 - A while knip in action 

Once again, this is a shell script that feeds full blocks of data 
into awk. The dscl statements on lines 3 and 5 are identical to 
die ones from die first script. Look how we break up the awk 
script across multiple lines from there. Line 5 ends widi a single 
c[uoie, which allows bash to treat everydiing up until the next 
single qytxe as continuous code. IVote the closing single quote 
on line 14\ Again, we're going to look for a match on the entire 
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input ($0) - looking for Vllscrs/M^rczak’' again. If and when 
we find it, diat's where our adventure begim. 

Line 8 initializes the variable “i” to 1. Not zero. We're 
going i{> index ilirough fields, and r/ofrTneed to eheck $0 again! 
line 9 shows ofT OLir while Itxjp. As long as i doesn't exceed 
the number of fields on tiie input recx>rd, we execute the loop. 
First time Lhn>ugh, i=l, and we oan use it to reference the first 
field of input ($1). Line 10 - an if staLement! Lovely! we 
find tliat die field we’re currently looking at contains “Dir” or 
C\ I ■') “ID” or ^^Sheli”, we print that field, llien, we incremenl 
i on line 11 so we don't kK>p around forever - and, we 
reference the next field in the next iteration of the loop. 

Really cool stuff here: using the built-in NF variable as a 
comparison in our while kx)p, using a variable for the field 
reference, using classic Unix utHilies witli OS X specific CO 
programs.,..nice. In addition to a while loop, awk supports tlie 
familiar “for" and “do” loop constructs. And as you may liave 
guessed, you may recognize litem already. 

A “do” loop LS a variant of die “while” kxip. Its main dificrence 
is that die action is alu^ys executed at legist once. It looks like tliis: 

do I' 
action 

1 while (condition is true) 


Need to see il in action? Mere ytiii go: 

BEGIN ( 

tiumHice = 5 
catTloie = 3 
do I 

theCatlEAway++ 

theMiceFlay = nuraMiee * theCatTsAway 
If fttioCatTsAway > catTime) theCatlsAway = 

0 

I while (theCatlaAway) 

print "The mice played " theHicePlay “ days." 

[ 

Figure S -Ao txumple do loiip 

Yes, it's a coiiipletely ctmtrived example so 1 could use 
“while the cat is away”,..I needed to bring a little levity to this 
column. Tills example does illastrate a little math, though, 
w'hich 1 haven't explicidy covered. 

llie for loop borrows its syntax from C and should lie 
pretty recognizable: 

for {initialise; to?st conditions; increment} [ 
actions 
f 


Rewriting the previous loop using for would look like this: 
01. BEGIN I 

02. nurnMic^ = 5 

03 . catTim^ 3 

04. for (theCatlsAway * 1; hheCatlijAway > 0: 

theCatlsiAway-H-) { 

05. tLeMceFiay “ numMice * thaCatlsAvay 

06. if (theCatlsAway ) catTlme) 

theCatlsAway ^ -1 
07. ) 

08. print ""The mice played " theMicePlay " days" 

09. 1 

Figure 6 - an eomple ft)r tiK’jp 


Look at that for loop! It's a fhing of beauty! No, 
really. ..Tm serious! (OuLside of the fuel that it ruins my play on 
words). It lets you take care of everything you need for a loop. 
Note, however, that the incTement happens at the bottom of the 
loop. This i.s important, and is the reason, we set 
the Cat Is Away to -1 radier than Q on line 6. Otherwise, tmr 
test would never be true, and we'd get caught in an infinite loop. 

Once again, like other languages, awk lets us skip an 
iteration of a Itxip, or break out akogether. Inside of a kxjp, the 
break keyword breaks out of the loop, and ends it: 

do ( 

if (laaveLoopNow) break 
procedure_one(x,y,a) 
procedure_two(x.y) 
trans f 0 rni_one (x. y) 

] while {x < currentThreshhold) 

In this example, if leaveLoopNow is true, execute the 
break .statemem and bail out of the loop - never to execute the 
remainder of die loop, picking up execution following die loop. 

A less clmslic version of break, is continue. A short 
ex;imple will make it clear: 

do t 

if (notThisTiinel continue 
checkVars(x,y) 
transf orm_on6{x.y) 

I while {x < currentThreahhoId) 

Here, if notThisTime is true, we just go back to the 
top of the loop. But the loop will continue, as long as our 
condition is true. 

There are also two Oow-altering statements that affect awk's 
entire flow - next and exit. The simpler of the two is exit. 
When awk encounters the exit statement, it jumps to the KND 
mie. Of course, you don't even have to have and FND rule 
defined. In tlxit aisSe* the script just terminates. Note that exit 
can supply a value to use as awk’s exit code. Nice way to test 
sucee.ss or failure in a shell script, exit wiihoui a value 
defaults to “0”. next transfers control back to the top of the 
script where awk will read the next record of input. 'Fhis is 
useful in a few different situations. If you only want to pnx'ess 
record,s in a file that has ^ fields, simply sue this rule: 

NF 1= 5 ]next I 

Tiiat’s also useful for error checking, wliereby if the target 
input doesn't 'look' right, you can just crank through the file. 
Perhaps even keeping count of how many records you skipped 
for use in an exception report. 

Arrays 

Mere's something that 1 can't tell you I've covered before. 
Certainly not in sed, nor in bash. Of course diere are other 
languages that siippon arrays, so some of this may kxik familiar. 
But, if this column lias Lieen your introduction to unytliing 
remotely related to programming or scripting, diLs wiO be slightly 
new. An army Ls .simply a variable that lets you hold a series of 


8 April • 2006 


WWW.VIACTECH.GOM 



Really fast compilers have arrived ... 



Get the most juice out of your new apples! 


New compilers, debuggers, libraries, and powerful tools 
from Intel® and Absoff are now available 

for Apple® computers using Intel® processors. 


Order today - Contact sales@absoft.com or call 248-853-0050 

http://www.absoft.com 


abss-ft* 


Development tools tor Apple® customers since 1964 





values. Being a l<Mxsely typed language, all arrays in awk are 
assodaiim - arrays that map keys to values. Asscx:iative 

anays do not need to use integers as die feey, or subscript, nor 
does every value need to be of ec}ual type and si2e. If you have 
a PUP I background, youll understand this innately. Naturally, 
examples are forthcoming. Like otlier variables in awk, arrays do 
not need to be declared, so you can just use them^ 

array [key] ^ value 

Often, you'll see simple aimieric keys (subscripts) - useful 
when k)ading data in from a file, and you want to track 
sometliing from every record, or mark certain records l>ased on 
a value. Just as often, though, you'll see a key; a string tliat 
maps to a value. We can use this feaaire like this: 

BEGIN I color ["red = "OxFOO" 
colyr[“&reen"] - "OxOFO" 
colorl“blue"J ^ “OxOOF" 

print color f""red" 1 

I 

Nice, rigiil? Arrays let us keep related values together. You 
can also use a variable as ilie key. Here's a totally trivial 
example that illustrates a few new concepts: 

01. #I/bin/bash 
02 . 

/System/Library/Ptiv^teFrameworks/AppleBOZn . f rainework/Versio 
ns/A/Re,sources/alrport -I | awk ' 

03. BEGIN I FS=":" ] 

04. I 

05. "."".SD 

06, recordlist 1$1] “ S2 
07, 1 
08. END I 

09. for (key tn recordlist) 

10. print "The " key " ia eq^ual to" recordlifit [keyj 

11. I 
IZ. ■ 

Pigurf 7 “ Many new eoneepts! 

Once again, I wrap awk in a basli shell script. First new 
thing, may be the airport comiiianci. With the 1" switch, it 
gives you inlbmiaiion alioui your current airport staitLS. Next 
new thing is on line 5: gsub. Sometimes, ex|KJSure to many 
languages is a bit of a curse. When 1 see tliLs command, 1 
always think back to BASIC'.s “gosub'' {go to .w^routine) 
command. In awk’s case, however, it stands for jiflobal 
suhsunic, Vm using it here jtist to clean up the output a bit. !t's 
really power!ul, lliough, and works like this: 

£sijb(regexp, substitution, string) 

Ni)w if.s appaitmi; I'm ju.st removing the spaces from $1: a 
space C “) LS Ixiang replaced witli nothing {"”) in the siring $1, Now, 
look what's happening on line 6 -- the value of $1 Ls Ix^ing lused as 
the key in the array "recordlist”. It's also being assigned tlie 
value of $2, the sec{>nd field. Then on line 9 in the END pattern, 
there’s a new flow contiDl smtemeni. A variam on a for l(x>p, we 
have .some special syntax that accesses each element of an array in 
turn, “key'’ is a ma<ie-iip variable, ttight there, on die spot, tt could 
really lie whatever we like, but a,s widi all variables, it ,sh<Hild lie 


something somewhat meaninghil. 'Hiis variable will contain die 
coirrent key name in each iteration of the loop. 

While there's a lot more to arrays, Fd tx^ remiss if 1 didn't 
mention two functions: split and delete, split splits a suing 
into an array based on a separator. Tills is just like awk’s main 
lcK)p function that breaks input into fields based on F5. [f you 
have awk reading a CSV file, you could use split thusly: 

X “ split ($0, tnyFleldfi, 

What this does is create an array - myFields - tiiat contains 
each 'field’ of $0, fields lieing separated with a comma, split 
returns the number of fields in the string, in our case, putting 
tlie result into "x”. If the input looked like this: 

Nike Jones, 555 1234. mjkej(dexample.com 
Rill Smith. 555-0984, btlls@example.eom ~ 

Sally Foster. 555- 3456 ~Sal]vtfff).exahiple.COni 


...then during the first pass, myFields would contain: 

myFieldEllJ = "Hike Jones" 

myFields IZl “ "555*1234" 

myFields il l - " mikcj @cxampIc.com " 

split is also a useful way to load up an array: 
split(*Jan.Feb.Mar.Apr.May,Jun.Jnl.Aug.Sep,0ct,Hov,Dec".month 

That's a lot easier than writing out "itKintliil] = 
delete is simple: it lets you remove an element of an 
array. Simply: 

delete rayl‘ields[2] 

...would gel rid of the phone numlier in our previous 
example. Of course, you can always just ignore a field, using 
delete will make sure it's gone if you choose to use for...in. 

Grab Bag 

Itiere are some final things I feel the need to mention 
aiK>ut awk, hut realized that I hey re eac h pretty short and 
belonged altogether in a 'grab bag’ section. Without further 
ado, here they are. 

In acidition to tlie otlier liiiilt-in variables that weVe covered, 
awk presents two built-kis as arrays: AKGV and ENVIRON. ARGV 
is :m array that contains ftich command line argument, including 
the script name itself in ARGVlOj. If you ran your script like this: 

$ awk f argvtest. awk varl 15 “ioio" “Shaminu"' 

...AKGV would contain: 

ARGVLoJ ” awk 
ARGV[1] “ varl 
ARGV[2] - 15 
ARGV[3] = "Tolo" 

ARGV[4] = "Sham^no" 

ENVIRON maps current environment variables to their 
values. For example; 
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print ENVIRON LOSTYPE] 

Oil niy inacliine won It! yield \!arwin8.0”. 

In addiiion to split and gsub, awk contains some really 
useful (and common to other languages) string manipulation 
functions, such as substr, toupper, length and tolower. 
Consider that homework. 

Finally, awk pixivides a way to get input outside of the main 
input loop, getline gets a jiew line of inpuh and can l^e used 
in two different ways. First, when u.sed hy itself , it will get tlie next 
line from input that the main icx)p would have gotten. Thus is 
similar to nc_xt (covercxl alxivc), however, get line doc^s not 
hiing how hack to die top of the scxipt. Secondarily, you can pipe 
input into awk and read it with getline. While more in-depth work 
sHlI re(|uires a shell script, this is my favorite way to write a quiek- 
and"dirty awk script. One example will get you going: 

$ awk 'BEGIN f'top -1 1" | getline; print S2 "" processes 
running"1' 

121 processes turuiing 


understandable nmf practical Between this column and the last, 
you should have a grxxl founclHion to build on. Of course^ there’.s 
a lot more to explore. I didn't gel to multi-dimensional arrays, trig 
matli, user<lefined functions, piping to output...and more. If tills 
has whetted your appetite, there are many restjuires that teach 
awk irvdepth. Jirsi dropping into G(x)gle and trying ieaming 
awk” brings back an inaedil^le numl:»er of resources. 

awk is a fantastic utility that has proved its worth over 
decades of classic Unix VLse. For OS X administrators, it dovetails 
perlectly with tile jxjwerful command-line utilities at our disposal. 

Recommended reading for the moiitli: Cuckoo's Egg, by Cliff 
Stoll. Released in 1989, this was one of the first tnick-a*hacker 
lxx)ks [ ever read. Of course, I could suggest some technic^al 
iTefcTence for you to dig into, hut this is just gcxxl reading. I saw a 
copy at a bookstore not too long ago, and that made me break out 
my old version. Still a gtxxl read Ltxlay, il' not a gieat way to 
com[iarc and contrast the technol environment of the late 198hs 
to tfxiay. Alst}, a goext reminder tiiat social engineering is timeless. 


‘fhe output of top is piped mio awk - directly from iaside 
awk! You can, of course, even use that trick conditionally, and 
go look something up on the fly if needed. 

Conclusion 

'lb show etmything that awk is capable of would lake a 
f)cx)k. 1 Ix'lieve IVc si town tilings tliat arc immediately 
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Chances are that if you are even remotely involved in network 
security you will have heard about V7»A?:s—Virtual Private Networks. 
According to the Gartner Group, it’s one of the fastest growing 
segments of the IT industry and is predicted to reach almost $6 
billion in sales in 2006. That’s pretty impressive when you think 
about how the markets have been doing lately. 


VPNs were created to address two different 
problems: the high cost of dedicated leased lines needed 
for branch office communicarions and the need to allow 
employees a method of securely corinecling to the 
headquarters' network wlien they were on business out 
of town or working from home. 

In Pan 1 of a 2-parl ankle, I’ll discuss what 
constitutes a VPN and how it works. HI also look at some 
of the different Vl^N Technologies and how they might for 
you. Pan 2 will get very technical and dive into how Mac 
OS X implements VPN technology. 

Public versus Private Networks 


could possibly use the Internet to access their company's 
network but, again, that’s not very secure. 

SOj you have the private networks iliat arc expensive and 
.slow and the public networks that are cheap and fast. Where was 
the happy medium? Hie answer was to use the public network— 
the Internet—but to hide the traflFic so others on the Internet 
couldn't see it. This meant encryption. Encryption is tlie jumbling 
of data using specific mathematics—^in other words, it's written in 
secret code. Of course, other users on the Internet can .still see the 
encrypted tralTic, they just can’t tell what it is Ixjcause it looks like 
gaii^age. No hacker in his right mind would go to the trouble to 
grab encrypted traffic, spend vast amounts of computing 
resources to decrypt it, to only dksc:nver he gniblx.k an email tliai 
says, “Hi, Morn!” Prolilcm solved. Well, not totally,.. 


Ik^fore VPNs, if a company wanted to have a secure 
network connect to an office in another geographic 
Ux:ation, they only had one choice: a dedicated leased 
line. This was a f>hysical filione line laid between the two 
offices and the only connections allowed on it were the 
two ends of the netwT>rk.s. No one could dial in to the 
network and you had to have physical access to the line 
to be able to connect. Leased lines liad two major 
disadvantage's—they were very expensive fil leased line 
prices typically range from $499 to $1250 per nionih) and 
they could l>e very slow, if a comj^aiiy had a lot of 
different offices to connect, the costs would scx>n reach 
astronomical levels. 

* Wlien the Iniernel became available for public use, 
companies quickly discovered that they could use that 
network to connect to their various locations. But, the 
Internet is a public network, is not secure, anyone can 
connect to it, and once upon a time had reliability issues 
for businesses. Also, anyone who has the righi kind of 
software can easily eavesdrop and capture as much 
traffic on the Internet as they want. While Internet 
connections are fast and cheap, that's not necessarily 
the best .solution for most companies who want to share 
private data securely. 

'fhe other impetus for tlie development of VPNs 
came from the nee<l for employees who wc^rk from 
home, or who are on tiie road, to securely access their 
company’s network. They could direct-dial in to the 
network, but it was quite easy for hackers to disexwer 
tliese plione numlx^rs and use them themselves. In other 
words, dial-ins were not very secure. Hiese employees 


What Makes A VPN? 

A prototyt^e of a Vl^N was Microsoft's first ^5 (Remote 
Access Server) system. It was only used on Nl-based systems 
and allowed remote users to dial in via modem. The difference 
from other dial-in systems was that RAS encrypted the session. 
It has its share of weaknesses, including a protocxrl that was not 
very secure, and the passwords could be easily cracked. 
Microsoft still offers RAS services on its servers, but it's not really 
considered to be a “true” VPN. 

To be considered a “true" VPN nowadays, the service must 
support the following: 

• Data Protec tion—the data traveling on the public 
network (Internet) must be unreadable by unauthorized 
users on the network. 

• User Authentication—ilie VPN must l)c able to verify a 
user's identity and restrict access to only validated users. In 
addition, there mu.st l>e a meiliot] of logging access. 

• Key Management —the VPN must be able to generate 
shared, secret keys with the remote users. 

• Address Management—Llie VPN must be al)Ie to keep tlte 

IP addresses of the internal network secret. 

• Mnhiprotoct)! Support —I he VPN must be alilc U> handle 

multiple protocols so data of different tyj^es can be shared. 
This includes protocols like SM4P, H1TP, telnet, and so on. 
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Fn>m iliesc requirements, three differeni types of VPNs 
have emerged; 

• Ftrcwall-bascd VI*Nss All the Vl^N negotiations are handled 

by tlie firewall. 

• Hardware-based VPNs? Generally, these ate encrypting roiilers. 

• Software-based VPNs: A complete package installed on a 
server, ideally dedicated to establishing and maintaining VPN 
connections. 

So, How Does A VPN Work? 

A VPN uses a special protcK’ol to establisli a virtual ebannei 
Ix-'tween two machines or two networks. Imagine if’ you could 
blow a soap bubble in the shape of a tube and only you and 
your friend could talk through it. The bubble Ls temporary and 
when you want to liave anoiiier eonversation, you would have 
to create another bubble. lhaPs kinda like a VPN’s channel, 'fliis 
channel is actually a temporary direct ses.sion. This is wliat Ls 
commonly referred to as tunneling. 

I’hen the VPN also exchanges a set of shared secrets to 
create an encryption key. The traffic traveling alt>ng the 
established cliannel Ls wrapped with an encrypted package that 
has an address on the outside of the packet, hut the contents are 
hidden frr)m view. It’s sort of like a candy wrapper. You can see 
(he randy, but you don't really know what the candy IcKJks like 
on the inside. The same thing happens wnth the encrypted 
traffic. The original contents are hidden from view, but it has 
enough infonnation to get ii to its destination. Once the data 
reaches its destination, the wrapper is safely lemoved. 

Ihere are generally two different protocols in use for \TNs. 
fPSee (Secure IP) and f2TP (I^yer 2 Tunneling PrQlcx:ol). Tlie main 
difference betw^een tlie two is di;tt IPSec does not have a way to 
create security keys and 121? does. IPSec imust l:>e rambined with 
another protocol like ISAKMP (Internet Sc.'C'urily Ass(x:iation and 
Key Miimtgemcnt Protocol) qt IKE (Internet Key Excliange). This is 
not a problem since most vendors include aU the necessary 
components within their prcxliKts for a complete solution. 

Here are the basic stejxs tliat happen during a VPN session- 

1. The remote user requests a VPN connection. 

This could l)e via a laptop with a dial-in ilirougli an ISP or 
via another computer connected to the Internet. 

2. The destination point receives the request and 
establishes a temporary tuimeL 

Ihe destination point is now beginning to set up the VPN. 

3. Both the remote computer and the destination share 
their keys and the destination network defines how the 
traffic will be eneapsidated with enerypted wrappers. 

Both of the keys had previously been created. They are 
enciyy^ted and can't be understood by an eavesdropper. 


4, The destination point sends a challenge to the 
remote user to identify himself. 

This is similar to the Army kxjkoui shouting ""Halt! Who 
goes there?” 

5- The remote user uses his IJserlD and password and 
whatever else is required (hke a smart card or token) to 
autlienticate liimself to the destination network. 

Hiese steps will have been previfiusly established when the 
VPN was first installed. 

6, The destination network verifies the reinote user 
and assigns a temporary IP address to the remote 
computer. 

If the verification process is interrupted or if the remote ii.ser 
cannot be verified, the entire session is drt)pped and no more 
iniffic is sent. 

7* file encrypted communication channel is 
established. 

Data now starts traversing the VPN. 

L2TP versus IPSec 

when deciding on a VPN, it's impoitant for you to know the 
differenceii iTetween the two main prc>tcx:ol,s used, orherwi.se you 
could end Uf) witJi a VPN that doesn’t really suit your needs. Tliese 
main pmtocoLs were develoi')ed for different types of traffic. 

LZfP emerged from the original PEP (Point to Point 
Protocol) that was used for dial-up connections. This was 
very pojmlar because it allowed the transmission of non- 
TCP/IP protocols hke IPX, AppleTalk, and NetBEUI. L2TP 
works at Layer 2 of the OSl (Open Systems Interconnection) 
model, which is the Data Link layer. Siiice it works at Layer 
2, it does not use packets to transmit data, it uses frames 
instead. A frame is a much simpler construct llian a packet 
and it doc.s not luivc as much information in it as a packet 
has. For example, a frame doe.sn't have any information on 
error controL You can think of a frame as a liursl of data 
rather llian a package of data. 

IPSec, on the other hand, works at Layer 3 of the OSl 
model, which is the netw'ork layer. This is the layer we are more 
familiar with since it deals with IP packets that have all kinds of 
infonnation in them. A packet has been likened to an 
envelope—on the outside of the envelope are the to/from 
addresses and a small dc.scription of tlie type of data enclosed. 
Since IPSec can only deal with packets, it is limited to 
transmitting d'CP/lP traffic. fPSec raukln’t handle AppleTalk or 
NetBEUI network protocols. 

Therefore, L2TP is better suited for VPNs for dial-up 
connections or networks using a variety of networking 
technologies like Frame Relay or ATM (Asynchronous Transfer 
M{)dc). IPScc Ls l:)etter if you have a straightforward IP-based 
network. On the odier hand, many users combine both IPSec 
and L2'1T on their VPNs for beuer security. 
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Setting Up A VPN 

Not to oversimplify it, hut tJiere are two basic ways of setting 
up a VPN. Ihe first way is normaliy used between networks and 
firewalls or encrypting routers Xo do the encrypting and 
deaypting of tlie traffic, in this setup there b no need for special 
software oh the desktop or client computers. The second methcxl 
is lo have a tire waif encrypting router, or VPN server at the 
destination end and special VPN client softw'are on tlie desktop or 
laptop computers. It all depends on whetiier the VPN is a two- 
way operaiion or a one-way operation. 

You won’t see the terms **one-way" or “two-way"' in any of 
the vendor's technical data on VPNs. Ihose are my terms. In a 
two-way relationship, or neiwork-to-network, you iiave two 
networks llial want lo wok togedier and eaeh lias [^a.sically the 
same VPN setup as the other. The request to establish a VPN 
ciHineclion can come from either direction. No special software 
is needed on the desktop computers liecaiLse all the enciypting 
and decrypting is done at the entry and exit points of the 
network. Both nem^orks a!.so have key management systems so 
they can bo\h create secret keys for a VPN session. It's important 
liial the two networks have compaublc VPN comixrnents or they 
won’t be successful in talking to one another. 

In a one-w'ay, or node-to-netw^ork, relationship, the 
destination network has the VPN setup and there is no 
agreement with anotlier network to share. In that case, the 
computer wanting to make the connection willi the network ha.s 
to have VPN client software and the requesE can only lie made 
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in one direction—from llie client to the network, Tlie client 
.software can request and authenticate itself, but the secret key 
making mechanistTLS are only on the network. The client 
computer will have a secret key stored on iLseif, but it cannot 
create new keys. 

Generally, the one-way system is used for remote usen? who 
are dialing in from home or while tliey are traveling on the rmd. 
Tliey dial up through tlieir ISP and the mechanisms for 
establishing and mainuiining VPN connections is all contained at 
the destination network. If someone with a laptop watli ifie Vl^N 
client software tried to cx^nnect to the company's network, he 
wouldn’t get toe htr l.iecause he woiikbit have the client software 
or a secret key. Additionally, the unanthorized user would not lx: 
lisied on the VT^N’s daialxtsc of authorized users. However, once 
someone dials in and is authenticated, their access is the same as 
if they were sitting in the same building ;is the destination 
network, [xnding fiixwall rules, of course. Also, Liiilike .sitting on 
tlie same network, typically, no broadcast traffic will pass over the 
Vl^N link, such as tlie broadcasts used for Bonjour. 

Iiiside or Outside? 

You can set up the VPN endpoint at various loaitions. Ilie 
endpoint is where the VPN tniftic comes into your neiwork. In some 
ca.ses the endp<iinT is also the firewall as many fiiewalLs cxime with 
Vl^N ai]rabilities nowadays. The endpoint can also lie in front of the 
firewall in a l)Mi{ off one side to the fitewnll, or iaside of the 
firewall. Kach of these configunilifins ha.s its pluses and minuses. 

If you choo,se to pul your VPN in front of the firewall, the 
mechanism does all of the enciypting aiui decjypting on its own. 
rhar means there is no need to allow an open VPN tunnel 
Ehrougli your firewall. All of the traffic ihtough the firewall will 
liave Ix.x'n [jrediltered and foniiatted so the firewaU can read it. 
1 lowever, if the WN fails or is taken dow-n, you’ll be faced with 
a siination where all the irafilc gexs oui unencrypted, or no 
traffic at all gets out. It dejxnds on whetiier or not your VPN will 
fail in the open or closed position. 

A VPN on the firewall would seem like a good solution 
because, again, y()u don't need Lo leave an open tunnel dirough 
the firewall. Hie firewall will handle all the enciyption, 
decryplion, and its regular joii of' the examination of iralTie. Tliis 
type of soluiion puis an enormous burden on die ^xior litde 
firewall, though. You are asking this machine to do a hell of a 
lot of prex'easing! Kneryption and decryplion is labor intensive 
for a computer, as is the examination of iraffic and that a>uld 
result in a bottleneck for tmffic. 

Another metkxl is to put the VPN on the inside of the 
firewall. 'I'his relieves the firewall and/or the router of having 
to handle the enciypiion and decryption of the traffic, but you 
have to allow a VPN amnel to pass through the firewalL A 
firewall cannot read encrypted traffic and it will allow that 
traffic to pass through unehallenged. Of course, the traffic will 
still be stopped by the VPN mechanism, but by that time it is 
already in the internal netwwk. [Bd. Note: this is such a 
horribly awful idea, we don't recommend it. Don’t 
unnecessarily poke holes in a firewall!] 


WWW.MACTICH.COM 




















SUPPORT 
FOR APPLE 

MAIL 




stopswwari 




KNOW WHO'S WATCHING YOU! 


'm 


PROTECT YOUR PRIVAa 

MONITOR COMMUNICATIONS 


SECURELY ERASE FILES 
BLOCK ANNOYING WEB ADS 


A Division of Smith Micro Software 


Available from your favorite retailers and catalogs. Download a FREE Trial at Allume.com! 

One hundred percent 10,4 “Tiger" compatible! Download a FREE trial version of Internet Cleanup at http://www.allume.coin/mac/cleamip/ today! 

®t TM, and © JOBS AJlumf Systems. IfK- OSK10J 'Panther' is required few Internet Ge^nirp JO, 






















Securing the Client 

Probably the easiest way to break a VPN's security is to 
get a hold of a laptop that ts used to dial in for a VPN 
connection. 1 know of more than one person who lias had a 
laptop stolen from a rental car within hours of arrival in a 
new city. The stolen laptop will have the VPN client 
software, the UserlD, and the secret key all stored on one 
machine. A smart laptop owner will not have saved the 
password for the VPN tunnel on his computer. If he has, the 
diief has just gotten himsetl a free ticket to wander around in 
your network! 

Users who use laptops to establish VPN connections 
willi your network need to be given lessons in maintaining 
good security, lliey should have up-to-date anti-virus 
software installed and ensure that it runs very every time 
they start the computer. Ami-vinis software is good at 
detecting Trojan horses that could he used to hijack or 
piggyback a VPN session. Additionally, the laptop should 
have personal firewall software set up. Some VPN client 
already include personal firewalls, so you 11 liave to check 
with your vendor as to whether yours does or doesn't. The 
personal firewall can ensure that only the VPN client is 
making the connection and that it's not aclually a Trojan 
horse program masquerading as the VPN client. Another 
good precaution is to enable the BlOS/OP/KPl pa.ssword. 
That way, if the computer is stolen, it cannot even he started 
up without the password, 

IPs a good idea Hi restrict remote VPN connections via 
laptop to thasc who really need tt. You shouldnl [landing out 
this capability like candy to anyone who asks for it. Your 
employees should be able to present a good case for needing it 
or it just tK’comes anotlter one of those bells and whistles iliai 
people like to have and l>nig about. Also, consider smart cards 
and tokens, such as those available from CKYPTOCard 
<http://www.crypiocard.com>. 

Some Terminology 

You1l find that the term VPN means different things to 
different people—especially when it ctjmes to vendors. 
However, die Ixtsic mechanlsuLs tliai are generally agreed upon 
are encryption and autlientication. Some vendors offer a 
**complete*^ solution and others only tiffer bits and pieces of the 
entire puzzle. You have to lie determined and keep asking 
fjuestions until you’re sure you're satisfied with their an.wers. 
It's no disgrace to say you doni imderstand. In fact, if llie vendor 
can't explain something to your satisfaction may lie that he 
doesn’t really understand it himself! 

I have included some terms and expressions you may hear 
or read. Mope this helps! 

• AES - Advanced Encryption Standard. The encryption 
algorithm used by the U.S. Government, 

• DES - Data Encryption Standard. One of the cryptograph it: 


algorithms used in encryption. A stronger version is known 
as 3DES ('inple DES). 

• Diffie-Heliman - Anollier ctyptogiapliic algorithm used in Vl^Ns. 

• GRE - Generic Routing Encapsulation. A methoci of wrapping 

packets so that tlie original addresses are hidden. 

• IKE - Internet Key Exchange. Tlie protocol used for 
exchanging secret keys in IPSec. 

• ISAKMP - Internet Security Association and Key Management 

Protocol. The forerunner of IKE. 

• LDAP - Lightweight Diret:i{>r>' Access Protocol. A set of 
protocols for tx>mputers to obtain information from one 
another, liased on the X500 standard. In VPNs it is used for 
secTOl key information. 

• MPLS - MulLiprt)LtKT}l Lalx'! Switching. Used to divert traffic 

wlien tliere are failures or Ixmlenecks in the network. 

• Oakley - A prolixt>l used For exchanging secret keys. 

• PPTP ” Point to Point 'runneiing ProicKx>t. A forerunner to L2TP. 

• QoS - Quality of Service. 11ie amount of traffic a VPN can 

handle and how well it handles the traffic, 

• iCADIUS - Remote Authentiaiiion Dial In User Servkx^, An 
authoriziilion system used to authenticate icsers. 

• RSA - ldvest-Shamir*Adleman. A cryptogmpliic algorirhm for 

key exchange, 

“ SSI I “ Seaire Shell. A .secure form of telnet that encrypts the 
traffic*. 

Summary 

This article on VPNs (Very Precious Network Security) 
introduced basic concepts, why they are used, and the variety of 
technologies involved. 

In Part 2, I will go deep into how Mac OS X implements 
1.211^, how it compares to other 3rd party strlutions, and how^ to 
connect to a Linux IJTP/IPScc: VPN Server. 

Alii 
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Safeguarding 
"sensitive data" 
using encrypted 
disk images 



By Aaron Adams 


With Tiger^s release, it's now exisier than ever to 
keep your (imagine me making big finger cjuotes here) 
sensitive tiara” secure* You know ihe **sensiLive data'' 
I m talking alx>uL The kind lliat's not intended tor aisiuil 
viewing. 'I'here's also the real seasitive data. Payrol! 
records, bonus charts, proprietaiy data, your secret plan 
for world peace. It's only a mailer of time until someone 
using a si ia red Mac j>erforms an innocuous Spotlight 
search that suddenly turns up a cornucopia of sensitive 
data associaietl with you. Depending (?n who Pmds ii, 
you could lose your job, lose business, lose your 
ssignificant other, or just have more headaclies than you 
really need. An ounce of prevention is w'nrili a ton of 
cure. 

Hiding such things from Spotlight is a good 
idea. 'I'o do that, you can create an encrypted disk 
image that is password protected to keep nosy 
users OLIL The comenis of the image won't appear 
in Spotlight unles.s the image i,s mounted. 

To begin, go to ihe /Applications/Utilities 
folder (press command - shift - u in the Finder) and 
start up Disk Utility. Click File, New, and Disk 
Image from Folder. This will create something 
called a sparse image. Sparse image.s are initially only 
as big as the data they contain, but have the advantage 
of expandability later. 

Select the folder w'here your sensitive data is located 
and press the Image button. Name the image. Select 
read/write from the Image Format drop“down. 
Click the Encryption drop-down and thoose AES 
128 (recommended). Select a save location and press 
Save. 

You will then be prompted for a password. This is 
the password Disk U Li lily will use to encrypt tlie data 
and that you will have to enter it each time tile image is 
mounted. Do yourself a favor and make the password 
hard to guess. Do yourself another favor and uncheck 
the box marked Remember password (add to 
Keychain). It defeats the purpose of encrypting and 


passw^ord protecting an image if yoidre going to automate 
its access with Keychain. Click OK after entering your new 
password. [Ed Note: Do yourself a final favor - make this 
password something different than your login password! 

A new' disk image containing your data in encrypted 
form will be created. Wlien you double-click the image to 
mount it, you will be prompted for the password. Drag 
and drop new sensitive ilata onto the imiige as desired for 
permanent safekeeping. 

Over time, your collection will probably continiie to 
grow and will liecome larger than the sparse image you 
just created. As I said befoi'e, sparse images can l^e 
expanded to any size you need, bill the drawback is that 
you have to do it througli the command line. 

Open Terminal and enter this command: 

hdiutil resize -size xxx /path/iLo/image »dmg 

w'here kxx is the size you want to the image to be in 
megabytes or gigabytes. For exatnple, 500mb or 4,7gb. 

Now' your sensitive data, or ''sensitive data”, is 
j^rotected from prying eyes and accidental finds. Backups 
are a simple one-file ropy operation. You stay out of 
trouble, tiff the unemployment lines, and in the closet. 1 
love it when technology helps people. 

_^ 
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TOOLS OF THE TRADE 


Building a Backup 
System on the Mac 

By Neil Ticktin, PubUsher/Editor-in-Chief 


tJnk'Ss you like fate, or mq a niasrKlust, backups 

are a necessary part oi any coinpLiter setup. Wheifier you have 
jusr one machine, or are in an Enierf^rise envinmnicni, ytju 
have lo think alxjut kiekujxs. Tlieie are a variety of reasons 
wliy you clo tackups. Sure, you imy want to provide against 
die obvious hardware kiilure, hut backups alsti give you 
protection against liaekers, viruses, newly iiisUilled software, 
inissiEig a)ni[iuiers, and die ever-present user error. 

T'here are a nunilier of solutions for the home network 
or individuals that are out there, and there are high-taid 
solutions for large networks and Enterprise environments. 
‘Fills article, liowever, talks about a mtdii-vendi>r approach 
that we tcKik on a real world network, 

Tliere have lx?cn articles out there about what to do 
with your older machines, but we thought that we would 
take the approach of using a combiiiaiion of existing 
haalware, upgntdes and modern technology to create a 
solid liackup solution for a small Co medium size business. 

Software, Media and 
The Test Scenario 

We wanted to test our new'ly built system with a 
sc:enario thai may be lypiol of many small to medium size 
businesses. In this scenario, w^e had one “main’’ Itxation 
with alxmi 11 machines, one satellite office with anotlier 1 
machines, anil one lelecommuten 

Many jK'ople today like backing up to a disk drive. It's 
fast. It^s very reliable, and, disks are relatively cheap these 
tlays. [ agree, in fad, we make sure that vve have a clone 
of main web server's hard drive available at all times, so that 
it c^an be back up and ninning in no time. But one thing 
that hard drives don’t tkj for you is give you “snapshots" in 
time which are the ultimate protection against viruses, 
hacking, newly installed software and user ernir 

If you w^ant snap.shots, as we do, llien you neeil two 
things: .stjflware that does that lor you, and a medium that 
supports it well. Some of the backup softwan? out there 
does not .support snapshots as completely as I winild like, 
or IS the wrong “size*" of software, so we cliose Retrospect 
6.1 as our [>ase. Furthennore, while we do have hard drives 
as part of our strategy, tape is our medium of choice simply 
Ix^ctuse it's easy to have multiple sees of data (so that some 
are off-site and some are on-site). It’s also very inexpensive 
for large volumes of data. 

TTie main tcK'arion has the large.si data sets: daialxises, 
web sites, file servers, email, and the dedicated backup 
server. With remote IcKations backing up to the main 


location, we wanted to h^tve deilU'ated hard drives in the 
Irackiip server that would !)c available M/7 and be the staging 
area for Ixickup to tape, our primary backup media. 

Putting Together the Pieces 

This was a fun project as we could look at a variety^ of 
wonderful proilucts to put together a ga;ai solution for the test 
scenario. In the articles to follow', w'ritten by MacTech's staff, 
you’ll see a numlier of different technologies. Some are specific 
to backups, bur many of these you am use in a variety of ways 
lo upgnide your machines. And st>melimes, upgrading is the 
most cost effective way to go, especially when you are talking 
about a platform as reliable as a FowferMac G4. 

The PowerMac G4 

In the past several years, Apple has made some simply 
terrific machines. Sure, the new iMacs and MacBooks are 
tibviously wonderful pnxlucts, but there are others that are solid 
performers. One such machine is the IkswerMac Ci4, which 
many of us have laying artHuid in quamitics. These machines 
have solid jtower supplies, are expandable, and are quite 
relial7le, but they are not the speediest. 

We have found tfutt in addiiion lo our iiiglurr-end Xserves, and 
Mac 0>S X Server, iliere dw a iiiimlxT of tilings that we on do with 
PowerMac G4s mnning plain old Mac OS X (Panther or llger). 

In creating a backup .syMeni, we kne^v liuit we wanted to have 
.stwenil iiaai drives, nuilliple Etliemet inieriac'es, higli fx^rfomiance 
I/O, and moie. It was easy to choase the expandible PowerMac 
G4 for rhi.s duty' a.s we didn’t need iht‘ prtHessing [X)wer of G5, and 
we had si.‘veral of lhesc‘ PowerMac G4s around. 

One of the l^eautiful things alx)ut tlie PowerMac G4 is that 
you can have 5 drives in it. Even the exceptional PowerMac G3 
d(H"sn‘i have iliat capabilky out of the box. Don’t get me wrong, 
you do have options on a PowerMac G5 to go lieyond the m^o 
drive positions, liut you need to ltx>k to third party t>piJons such 
as those from Wielx^Tecli anti others for drive module 
expansions. These are specifically designed to give enough 
cooling even though Apple didn't design these mac'hines to do 
thLs. So, make sure that y<ni are relying on a reputable vendor 
Ixfore pulling more Uian two drives in your PowerMac G5, 

What Needed To Be Added 

Retrospect 

The first choice you have to make on the backup system, 
pos.sibjy even before the hardware you arc going to run on, is 
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the software. In our case, we wanted something easy-Ltj-use, 
and even familiar, !>ut that could liandle a decent size 
network. On the Mac, flie obvious choice was Retrospect by 
EMC Insignia. 

Retrosjxrcl is a great [induct Idr the right size inarkeL If 
you are have thousands of clients, should you use it to back 
up eac:h of them to a server? Nope. You’ll want to look at 
one of the more “Enterprise" level liackup systetns, or use a 
Windows or Linux box as a backup server. 

One of the Iimirarioos of Rerrospea is that it can only 
perform one I rack up at a Lime. For a smaller environmeni 
(e.g., rlie SMB space), this works fine. But if you liave high 
end needs, that’s beyond the scope of this article, and you 
should look at otlrer applications like Neivauh by RakRone, 
bru by 'Iblis Group, or 'I'inte Navigator liy Atempo. These 
types of products have the ability to do inuiliple backups 
simiikaneously to disk (obviously, all products can only 
backup to one tape at one lime). Take note: while these are 
great solutions, tliey are industrial, and some of them can cost 
a great deal of money, and are likely going to take more effort 
to set up and manage compared to Retrospecl. 

To l>e fair, Retrospect is not designed to backuii live files. 
With that in mind, whether ifs our Now Up-to-Date server, 
our FileMaker Serv'er, or the Xserve, we make sure that the live 
databases are set up to save off copies of the databases 
periodically to their local drive, and then when Retrosi>ect 
comes through, it backs up those snapsiiots. 

If you do want lo backup live files, you really need U) 
look at a different Ey|>e of software (see aliove) for a more 
Enterprise level approach. 

SQL Backups; Navicat 

As you’ll see in the article on Navicat, there are a variety' 
of ways to backup MySQl. databases, whether at the 
corninand line, using open source options, or a commercial 
product. In the accompanying article, we give you not only 
the command line information, bill took at a look at the 
commercial application Navic:at, which has some really nice 
backup and restore functions that you can schedule. 

Soiinct SATA/IDE Interfaces 

We want to use some existing drives, and experiment 
witli both larger AlA/lDE drives (e.g,, huger than 128GB) as 
well as the new^er SATA drives. There are a variety of ways to 
do this, and we chose the Sonnet pnxJucts to do this. That 
allowed us to add both RAID and SATA drives to our 
PowerMac G4, And, when Retrospect is backing up these 
drives to the tape drive, liiey scream. 

Sonnet Gigabit Ethernet 

Since much of the IAN at the nuhn kxiation is gigabit, we 
wiinted to add gigabit Ethernel to ihc PowerMac CA, And, wc 
didn’t want the PowerMac to share that interface for uploads that 
were being done from tile satellite office nor the telecommuter. 
By adding die Sonnet gigabit Ethernet card, we were able to 


dedica.te that interface lo the IAN, and the built-in Ethernel to the 
Iniemci Ixtckups that were happening. Since everything liap[7ens 
at the same time at night, tlks optimized the use of the machine. 

SDLT 600 

We needed a tape drive for tills setup. 'Ibday, the two 
formats that have the most support are DL'f and LTO. Both are 
wonderful, and you can read more on these in llie SDLT review 
that we have. In die end, we chose the SDLT 60t) which holds 
3 OO- 6 OOGB per '-SlOO tape, and in real life usage regularly gets 
at least 450GR per tape. 

ATTO SCSI-3 Interface 

7he PowerMac G4 does not have an external SCSI interface. 
You add that widi a PCI card. ’Widi that in mind, there's only 
one company that comes to mind: ATTO. ATTO’s SC$I-3 
interface cards are excellent. And, if you choose the 
FibreChannel approach, tliey have options for you there as well. 

Media 

You c:an’t backup without media, so we chose the Maxell 
solutions for botli SDLT 11 tapes as well as cleaning tapes to 
imintain the Quantum SDLT drive. 

Daystar Acceleration 

At first, we weren't going to accelerate die PowerMac G4, 
and to l>e fair, it did run ok without any acceleration. But we 
wanted to see whai die difference was, so we added in a 1.8GHz 
accelerator from Daystar, and tmti\ what a difference. Well 
worth the $33U for this interface card. Evef^^thing runs so much 
faster and better lhan without the accelerator. 

Conclusion 

By using a variety of soluliom, and basing it on a PowerMac 
G4, we were able to focus as much of the resources as passible on 
the backup media/drive. 4b us, this allowed us to get the test 
sc^enarin ontfi a liackiip sy.stem that was relialile, mexiem, and 
would need as few tapes as [xxs.sible to lioJd tlie data Ixdng backed 
up yet. And, this wasn’t your typical “test bench" scenario. While 
w^e did design it for a diverse test, w^e grou|5ed these sets of 
macliines logetlier for a real world test that wc did over tnultiple 
months and woiked out all the kinks. It’s as real world as it gets! 

Of all the things that you can do on the Mac, 1 think yoiill 
find that backups are one of the most "diverse” set of choices. 
There are sn many different ways to go. You just liave to think 
it through and prioritize. Once you have a set of ordered 
priorities, you1l find that decisions .start failing into place easily* 

Hopefully, tills article will help you tiiink througli your own 
examples. But again, even if you don’t have backups on your 
mind, check out the accompanying product solutions, as they 
will apply to much more than just backups. 

As always, let us know what you think! 

\\\\ 


22 April • 2006 


WWW.MACIKH.COM 









Premium 



Small Business Management & Accounting 


Software 



Mind Your Own Business. Smarter. 





ATTO ExpressPCI UL4S 
and ExpressPCI UL4D 

ATTO Technology Inc AdaptBrS 

By MacTech staff 



SCSI on Mac OS X 

For those of you wlio have l)een around to 
reineinlxiT SCSI on early Mac OS X, you 11 likely recall tliaf 
SCSI on Mac OS X 10.0 and 10,1, and even to some extent 
10.2, was a nightmare: troublesome, error prone, and 
unreliable. IJitimaLely, Apple re-wrote the SCSI 
inipleinentalion, and SCiil on Panther and beyond has 
worked as it should. It would be a mistake to judge SCSI 
today by those early experiences. 

Today’s SCSI Experience 

When ii comes to SCSI on the Mac, tlie first name 
that comes to mind is ATl'O, AITO has a variety of 
technologies, SCSI and othei’S, and a variety of form 
liUKJrs. In our case, we looked at the single connector 
ExpressPf"! IJL^iS, and the dual connector ExpressPCI 
11L4D SCSI adapters. 

Simply put, lhe,se products provided a very 
pleasurable experience — we installed the cards, and 
they worked. No drivers. No hassles. It just worked, 
and it worked well. 

To he fair, many people may prefer FibreChannel. 
It all comes down to what you want to connect to, 
what is available to you, and what you w'ant the future 
path to be. If you do choose FibreChannefi you should 
also take a look at what ATTO has to offer as they are 
strong there as well. 

The Details of SCSI 

A'l'I'O ExpressPCI UL4.S and ExpressPCI UL4D SCSI 
adapters are part of the ljlira320 SCSI host adapter 
series for data intensive enterprise servers and high-end 
workstations rumiing applications such as high-end 
video editing, database engines^ mes.saging, and weh 
servers, UL4S and UL4D support up to 30 SCSI bun IDs 
and Low Voltage Differential (LVD) for cabling up to 
12.5 meters per bu,s. Roth products are compatible with 
single-ended SCSI devices, providing cal)le distances up 
to 3 meters, UL4S is a single channel Ul£ra320SCSh PCI- 
X host adapter with data transfer rate of 320 MB/sec* 


whereas IJL4D is a dual ciiannel Ultra320SCSl, PCl-X ho,st 
adapter with data transfer rate of up to 640 MB/sec. L1L4S and 
UL4D are compatible with Mac OS X, Windows Server 2(X)3j 
Windows XI^ Windows 2000, and Linux. Dynamic bus rescan 
is available for Mac OS X only. 

While 3 meters of cable is recommended for most 
applications, when we did our install, the drive was in the rack, 
and the PowerMac wasn't. We reached out to see what cables 
were available in longer lengths. We found the folks at 9 To 5 
Computer Supply <www,9to5computer,com> had a 10m (yes, 
30 feet) cable, and they sent it over for m to take a Icsok at, 9to5 
also has a range of other ''toys”, new and refuri^islied, with a 
focus on mass storage solutions. 

We ]>lLigged the long cable in, and the tliroughput was 
spectacular between tlie ATTO card and the Quantum SDLT II. 
Be careful wlien you order cables as tliere's a variety of 
connectors for the 5C51 3, In our case, we needed a VllDCl 
male to HDdB. 

UL4D is ecjuipped with two exlernal VHDCh and iwo 
internal high-density 68-pin connectors. It is 6.521 inches in 
length and 4.450 inches in height, UL4S featuiifs one external 
high-density 6B-pin connector, and one internal high-density 68- 
pin connector. It is 6.521 inches in length and 4.2 inches in 
height, UL4r> is Mac G5 compatible, and it Is available as a 
standalone or part of an ExpressRAlD Kit diat includes 
ExpressRAlD Software. 



ExpressPCI UL4D 
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'Hid LFL4S and IJL4D 
lK)th fciiLurc a 6*1-1 >it/l 33 
Mill PCl-X bus with 
compatibility to PCf-X 1.0a 
and PCI 2.2, Accelerated 
PCI Ims management 
enables PCI Bus Master 
rate of l-GB/see, IJ14S and 
111,4 D can operate in 
ceinpenirure range of 045 
degrees C, humidity 10- 
9(Bf) non-condensing, kind 
airflow HK) LI'M (min). 
Power rating of fioth SCSI 
adapters is 0.75 typical/7.0 iruix. Amps @ + 5.0 and 0.05 

Amps @ + 12.0 VDC witli Kl signal comfratibilily of 33 Volcs/5 
Volts. In terms of iieiia[)iliiy of these products, MVBV (mean time 
l)eiwix:n failures) is 150,000 hours, and M'riK (mejin lime to 
tepaii') is les,s than 15 niiniites. 

Backward Compatibility and 
Advanced Streaming 

While we were ftx.u,sed on 5CSI3 and newer technologies, 
there are limes you want to be able to use older iiem.s, ATTO's 
proprietary Vpath Technology enables the UL4S, and UL4D to 
offer users the flexibility of connecting high-speed Ultia320 
devices externally, and slower legacy devices internally, or vice 
versa, without compromising on the performance of the higli- 
speed device. Backward compatibility is supjx>rted for Uiira 160, 


Ultra2, Ultra/WIDE, Fast/WIDH and Narrow SCSI devices. The 
UL4S and LIL4D are ASPl (Windows) ct>mpatiblc% RAID ready, 
PC 99 tomplianl, plug and play compatible, feature Flash ROM 
for ea.sy field upgrades, and supports automatic and upper-byte 
termination for narrow devices. 

'['he Advance Data Streaming (ADS) feature provides 
controlled acceleration of data transfers utilizing optimized 
SCSI-3 algorithms, embedded RISC I/O processors for low 
overltead, and optimized gaiher/scauer of lists. ADS, facilitates 
birs mastering eliminating CPU pnxessing time as Ixittleneck, 
Tagged command queuing in ADS allows efficient prcK:essing 
of threads, and disc'onneci/rec'onnect reduces wait time 
between transfers. 

Tlie UL4S and UL41) also support Ultra320 specific features 
such as packetized SCSI, read/write data streaming, training 
patterns, pre-compensation, double traasition clocking, Quick 
Arbitration Select (QAS), Cyclic'al Redundancy Checking (CKC), 
Domain Validation (DV), Asynchronous Informatii>n Protection 
(AlP), free-running clcKk, and fit)w conirol. They also support 
multiple block sizes, and are bootable from attached disks. 


IJL4S and UL4D come with ATTO ExpressPro-Tools and 
ArrO Configuration Tck>I fonmiiting, and utility softw^are. 
UL4S and UL4D are priced at $349 and $499 respectively. 
Both produas are RoHS compliant (2002/'95/EC)* 

Avalabic at http://www,attostore.cQm 
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Think blazing-fast performance • Think o/ie click installation • Think smooth data streaming 



For more information contact your ATTO representative @ 716.691.1999 
or visit us on the web ® www.attotech.com/info.htmt 














Daystar’s G-Celerator 
G4 CPU upgrade 

By MacTech Staff 


One downfall to using a PowerMac 04, rather 
than a newer machine, is the processing power. 
With an application like Retrospect, that has to 
do gargantuan amounts of processing for its 
matching of files and sets, a CPU upgrade is a 
great way to go. 

In our scenario, the PowerMac G4 was a 
451)MIlz AGP machine, so any upgrade was going 
to \ie helpful. We chose tlie mid-range single 
1.8GHz G4 upgrade that Daystar sells as it was an 
economical solution ($330)- 

'rhis prexiuct made everything in ReirospecU nm 
better and fasten It was especially helpful when 
Retrt>speci was trying to match sets, and go througii 
the catalogs that it liad — nt>rmally a daunting task 
on the G4 45QMHz machine. Even opening the log 
window wa.s much hister, 

1’lie end restill is lliat the entire machine ran 
Jar better than u,sing the huili-in 450MHz 
proces.sor, and w^e strongly encourage you to look 
at what you can do with your older machines wath 
this type of solution. 

Of course, the brand tliai has lx*en an>und 
seemingly forever in the Mac market Is DayStar, so 
we tcx)k a look at the st>luiion.s they .stand behind. 

The G-Celerator 

Daystar’s G-Celeraior G4 MHz CPU upgrade 
card 1.8 GHz is de.stgned for all PowerMac G4 
.systems. The higlier end upgrade.s for some of the 
models can go u]> to 3600 MHz. The G-Celeralor 
Dual G4 MHz CPLf upgrade card is powered liy 



Lwcf Freescale T8 GHz PowerPC 7447a (G4) 
proccsstxs (1.42 GHz overclocked to 1.8 GHz) 
with an AltiVec ‘'Vetociiy Engine” vector 


processing unit, and a 312k on-chip level 2 cache 
operating at the same speed as the processors. The bu.s 
speed of G-Celeralor Dual G4 MHz CPU upgrade card is 
100 MHz. This upgrade card is de.signed to support 
adjusting of bus and backside cache ratios. 

Day.staCs solutions have great compatibility all the 
way from Mac OS 9.2.2 through Mac OS X 10.4.3- 
Daystar has options for a wide variety of the 
PfwerMac G4 unci enher machines including: AGP 
(Sawtcjoth), G4 Server, Gigabit Kthernet, Digital Audio, 
Quicksilver, and Quicksilver 2002. The G-Celerator 
upgrade does not support sleep mode on the Power 
Macinl€)sh, but as a server we didn't care. Sleep mode 
needs to be disabled for using G-Celeraiur Dual G4 
MHz CPU upgrade card and it cannot l>uut from Mac 
OS X disks before 10.3.3. Again, not a problem for our 
installation. 

G-Celerator upgrade cards feature rnuiti-lcvcl power 
senings and “super-cooling” tedinology. Installation of 
this uj>grade card does take a hit to do, and requires 
Ujxlating finnware and replacing old CPU and heat sink 
with G-Celerator Dual G4 MHz CPU upgrade card witli 
!>uilt on fans and heal .sink. It took us about 30 minutes 
cverytliing said and done. 

One intere.sting thing to note is power consumption. 
Regardless of the answer, we wanted to upgrade the CPU 
on tliis, but we were curious a.s to how much more 
electricity this machine would consume compared to a 
liase 430MHz G4 machine. In the end, the upgraded 
machine used close to 3(M m(>re electridiy. In real 
terms, this is alxjul $3/month (wcYe about $0.25 per 
KwH in Southern California) ... well worth the benefits 
from this machine working faster. 

This is an enjoyable upgrade. Well worth $330 if 
you need the processing power as we did in the 
backup solution. 


G-Celerator G4 MHz CPU upgrade cards come 
with 3 year manufacturer limited warranty and 
Daysiar has solutions starting at $299 for the 
lGHz+ solutions. 

http://www.daystar-tech.com/ 
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Is your computer running slow? 

Maybe it needs a boost. 



Make your life a little faster and easier. 
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Name brand quality. Value pricing. Lifetime guarantee. World class support. 

Toll Free: (800) 895-3493 • Outside US/Canada: 805-494-9797 • Fax: 805-494-9798 

www.betterram.com 










maxell 


Maxell’s Super 
DLTtape II 


Oh Yeah, Media 

WcVc Uilkcd a lot about liackup, lic3wever, your 
backup is only useful if you can read ihe data back 
and restore. Scy^ after youVe invested all diis effort, 
and money, in your backup .system, it makes no 
sense to skimp on the media. 

Since weVe had great experience with Maxell 
media, we clic^se it again liere. Maxell’s Super 
DLTtape !I cartridge has a capacity of 300 GB and 
600 GB in native and compressed mode with 
transfer rates of 36 and 72 MB/sec, In our use, 
we regularly saw 450CiB per tape, and even at a 
cost of around $100 per tape, this was amazing 
compared to what weVe seen with other media 
in the past. 

For tile tape geek in you, Sufx^r DLTtape II 
feattiresS NeoSMAlTL (Neo Super Maximum capacity 
Advanced Reliability Tape technolcjgy platform) for 
higher capacity, and proprietary' ultra-line ceramic 
coated metal particle tape for guarding against 
humidity, heat, oxidation, and abrasion. 



Super DLTtape II is equipped with a buckling 
system that supports operation in heavy-duty 
cycle scenarios, and ensures a secure link with 
drive leader. The tape lock mechanism maintains 
proper tape tension preventing tape movement 
and slack. Advanced polishing technology 
produces a smooth magnetic layer for less head 
abrasion and l^etter writing/reading, whereas 
Optical Servo enables tracks to be written on the 


By MacTech staff 


back, freeing up 100 percent of tape for increased data 
storage capacity. 

What does tliis all mean? It means that Maxell has 
paid attention to make sure the tape doesn’t get caught 
up in the drive mechanism, and just works. 

The tape in Super DLTtape fl is 1/2 inch wide and 
2,066 feel in length. It has a durabliity rating of 
1,000,000 passes, coercivily of 2,600 Oe, and an 
archival storage lifespan of more than 30 years. 
Oi>erating temperature range is 50 to 104 degrees F, 
and operating humidity range is 20 to 80 percent RH. 
Storage temperature range is 60 to 90 degrees F. 
Ardiival temperature range is 64 to 82 degrees F, and 
archival huinidity range id is 40 to 60 percent RH. High 
coercivity Lind l>erter remanunce result in lower noise 
level and higli density recording for accurate reading. 
The cartridge measures 4.16 x 4.15 x 1 inches. 

The tape Is also anti-static, du.st resistant, and 
come.s in blue for easy recognition. The package is 
factory- sealed and a custom barcode labeling service 
is also available. Even the new labeling system is ea,sy 
to use, anti easily replaced if you cltange ilie purpose 
of the tape. 

Maxell also makes great cleaning tapes. Each of 
these can he used up to 25 limes, and ii takes care of 
counting for you so that you doivi dt) damage to your 
drive by cleaning with an already used cleaning tape. 
With SDL'l', you don’t clean proactively, only when the 
drive is asked, so we’ve no\ had as much experience with 
these cleaning |>roducts as we have with the tapes, but 
they are pretty simple: you put them in, they clean, you 
are done. 


Super DLTtape 11 is sold through a number of 
online resellers for as low as $95. Cleaning tapes 
are alxaii Lite same, or .slightly less. 

For more information visit: 
htt p://www.rTiaxgll-data.CQm 
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Multiple Formats. 
Multiple Platforms. 
Complex Installers. 




Licenses 
start as low 
as $99/Yr. 


We have the solution: 

Stuffit Engine SDK 

_Iff_ 


Solving the compression & multi-platform puzzle! 

www.stuffit.com/sdk/ 


Put the power of Stuffit to work for you. 

■ Adds value to your applications by 
integrating compression and encryption tools. 

■ The only tool that supports the Stuffit file format. 

■ Make self extracting archives for Macintosh 
or Windows 

■ Available for Macintosh, Windows, Linux or Solaris 


4 

Mac 


5 


Solaris 


Stuffit InstallerMaker 


An OS X native version ready for developers! 
www.stuffit.com/in stal lermaker/ 

— 



Prices 

Give your software a solid beginning 

start at 

■ Create Macintosh OS X and Macintosh Classic 
compatible installers 

$250 


■ Get all the tools you need to install, uninstall or update 
your software in one complete package 


■ Add muscle to your installers by customizing your electric 
registration form to include surveys and special offers. 


w\Systems 

www.a flume .com 
emaH: dev.&altspallume.com 


2004 Allume Systems. Jnc Stuffit Stuffit Installermaker and Stuffit Engirte SDK are trademarks or registered 
trademarks of A Hume Systems, Inc. The Allume logo is a registered trademark of A Hume Systems. All other 
products are trademarks pr registered trademarks of their respective holders. Alt rights reserved. 




















Navicat 


Navicat: More Than Just 
Backing up MySQL 

By MacTech Staff 


MySQL Management Tools 

Tliere are a numl'ier af ways to manage and even backup 
your MySQL databises. St)me petiplc prefer tiie a>inmand line, 
Otiieis decide that they like a wei? interface like phpMyAdmin, 
Finally, you tnay w;uit to use a standalone appliniiioo lhafs a 
GUI like CocoaMySQU MySQL Administrator or Navicat 

liecause of the issues of I racking up a live MySQL 
database, and even metre the ca,se with lietraspect with 
MySQL databases (see the article on Retrospect in this issue 
for more infVxniation), we needed to find another way to 
backup our MySQL dataljases. 

If you decide to do this at the command line, you can 
use ‘mysqldunip' in a cron job: 

mysqldtmp -h -a -add-drop-table u username -pa^svard 
"thepassword” > backup,sql 

You can resttire it with: 

mysql -u username -p < backup.sfl 

Tile I'leneflt, of txiurse, is that this doesn't letjuia' any additional 
pRxIuct, it's tehabk^ and ifs scxitre. You cun drop it into a 
sc’ript, if you'd tike, but if you do, make sure it's owned by rextt 
and can only lx: accessed h)f nx>t (0700), And, if you do itiis, 
you can aticl in a “logger” sialemenl so that you can monitor 
things, or ask cron to niiiil you die output liy default, 1lien 
again, you may umti a GUI, and want to lx able U) touch the 
results a bit mom e^isily than what cix>n dtxs for you. 

Why Navicat? 

We chttse Navic'ui sfiecifically Ixcause of its easy to use 
scheduling features ttj backup SQL databases, restore litem 
easily, and even rejtliaite data Ixlween daialxtses for 
nightly updates. 

While we started to use Navicat specifically for backups 
of the MySQL databases, we found a varit:ty of other uses. 
Specifically, if you aren't fluenL wiili MySQL queries, Navicat 
helps by allowing you to define a query through the GUI 
and then shows you what the resulting query would look 
like. 

About Navicat 

Navicat is a MySQL database administration and 
development tool that allows professional developers as 


well as new users to cTeate, organii^e, access, and share 
information in a secure and convenient way. Navicat supports 
multiple MySQL server connections which on lx connected 
kxralty or remotely (remote MySQL server can lx running on 
Mac OS X, Linux, UNIX, or Windows platfonn). Navicat 
re(]utres Mac OS X 10.1 or later. 

Some of die important feariires of Navicat for Mac OS X 
include SSH Tiinnel, data and siructuie sytichixinization, SQL 
ainsole, views, stored firocedure, trigger neation, suppetrt for all 
MySQL server versions alxjve 3-21, creiiiion and deletion of 
databases, tables, indexes, and users, stored j>itx.‘eduR.*5, foreign 
keys. Uniaxle anti charatter set suj>^x>ri, import / export data in 
up to 4 most popular fonnats (C3SV, TXl', UBF^ and XML), creation 
/ execution of SQL queries, printing lalile sinicture, creation of 
sc'heclule for Ixickup, backup / restore of database, saved queries, 
support for translening claUitxases from one MySQL server to 
another MySQ!. ,setver, and managing user privileges, 

_____ mm , 

>-T-* 

«ini« kPMvMrt^ tom 
inmea iPmoHdrii M<H 
iwwot iPnwOff^tt.iMW 
KwoOf tmsOtfrn Midi 
twuOl 


I'] HMimiJiun'.tclHmi 

tiwu^ 

ntM 4 


Navicat: Main Interface 

Navicat’s main interface comprises Server Navigautr and 
Database Window, Seiver Navigator displays a list of server 
connection.s assigned in Navicat. These connections can he 
set by Navicat to open automatically on start up, Navicat 
provides 10 views; Connection, Table, View, Stored Proc,, 
Query, Backup^ Schedule, Data Transfer, Data Sync, and 
Stnicture Sync. Database Window shows the content of rhe 
chosen view. 
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Niivicat's S.SH tuniieiing fcuiure am be used to encrypt 
communicat ions l>etween Nuvkat and a remote MySQL 
server. Many MySQL hosting providers block access to the 
MySQl. server from outside hosting company's network, and 
only grant access to users connecting locally; SSI 1 tunneling 
allows connecting to a MySQL server from behind a firewall 
when the MySQL server port is blacked. NavicaLs pem 
forwarding functit>n can be used for connecting provided 
SSH access is available from the hosting company. Navicat 
communicates with the remote MySQL server in plain text 
(with the exception of the user password); Navicat’s pod 
forwarding hmc'tion provides security of comniiinicatians 
with the MySQL server and it protects MySQL sessions from 
various attacks. 

Typical opemtions that can be carritxl out on databases by 
using Navicat arc' creating database, opening database, renaming 
database, deleting database, copying database, moving dambase, 
and maintaining a cLital^ase. Maintt!nance options for a database 
include opiimi/e, analyze, check, and repair. 

Navicat allows the following operations to be performed 
with tables: creating a table (from scratch/from an existing 
one in the database)^ open a table, design a table, empty a 
table, duplicate a table, and change table type. In addition to 
these functions, Navieai alsf> f}ffers functions to maintain a 
table. These functions include opLimize table, analyze table, 
check table, and repair table. Navicat also features a Filter 
Wizard that can be utilized to filter records in NavicaFs Table 
Window. Filters can be saved for fast retrieval and iltcy can 
also be .saved to a profile for retrieval when table is opened 
again. 

The options available with Navicat to work with queries 
are creation of query, opening or running a query, deleting 
a query, saving a cjuery, and loading SQL file. All the query 
aclion.s can be stored in a log file for tracking. Navicat also 
features its “Visual Query Builder” that can he used to create 
join queries with options to specify selection, grouping, 
sorting, and projection criterion. SQL Console can be used to 
run SQL (juertes. it simulates the command line environment 
of MySQL. 

Stored procedures and functions were inuxxiuced in MySQL 
in Version 5.0. Navicat sup[X)iis ffjllow'ing oi>eralions related to 
stored procedures and fimctions: create stored 
procedure/function, design stored prcKedure/fimction, and 
delete stored pitK'eclure/funclion. Ihe feature of views was also 
added to MySQL Version 5,0. Navicui allows cTcation, design, 
and deletion of views. 

NavicaFs Tal:i!e Window enables editing, adding, deleting, 
and sorting data in a table. It also features a hioh edit control 
that facilitates editing of binary data. Navicat can be used to 
manage user and host privileges. Privilege management 
operations provided by Navicat include user privilege 
operati<ins .such as creating new user, deleting existing user, 
and setting privilege.s of a user, and host privilege operations 
such as creating new host, removing existing host, and setting 
privileges of a host. 




domains 


Get your .COM 
or any other 
domain name 
here! 

FREE with every domain: 

FREE! Starter Web Page 
FREE! Getting Started Guide 
FREE! Complete Email 
FREE! Change of Registration 
FREE! Parked Page w/ Domain 
FREE! Domain Name Locking 
FREE! Status Alert 
FREE! Total DNS Control 

Just visit 

I www.mactechdoinains.com I 

to register for your domain today! 


when a non^domain name product 
is purchased. Limitations apply. 











Navicat’s Backup Tools 

Navicat's backup feaiorc allows backup of all tables and 
records of a MySQL database. Backup can be restored by 
using Kestore Backup function. Backup operations allowed 
by Navical are creation of new backup, restoration of a 
backup, deletion of a backup, and extraction of SQL from a 
database. Navicat's data Transfer feature allows transfer of 
tables/rccords from one MySQL database to another MySQL 
database or a plain text file. The target database can be on 
the same server as the source database or on another MySQL 
server. Navicat allows saving a profile for easy retrieval 
and running of data transfer between databases. Data transfer 
operations offered by Navicat are creating a new data 
transfer profile, deleting a data transfer profile, and setting 
up general and advanced settings. 

Navicat can be used to create batch jobs for automating 
function.s such as Irackitp, restore backup, data transfer, iniptm 
and export. Batch job can lx; used to exeaite a series of actions 
one by one by just executitig the batch job. Batch job can also 
lx scheduled to exeaite at a specified lime. 

What is MySQL Doing? 

One of the cool features of Navicat is that you can see 
what your MySQL database is doing. There's obviously a 
variety of other ways you can do that. In the ease of Navical, 
the GUI has a server monitor that can sliow MySQL Server 
Process List, MySQL Server Varialjles, and MySQL Server 


Status properties from the selcctroii of MySQL servers. The 
data synchronization functionality of Navicat transfers data 
from one database to another with detailed analytical process. 
The user is authorized to rollback the transferring process, in 
addition to inserting, deleting and updating records to the 
destination. The synchronization profile can also be saved for 
setting a scfiedule. Navicat also provides stmciure 
synchronization to compare and modify the structure of tables 
with a detailed analytic'al prtKess. 

Conclusion 

One of the open source alternatives or the command 
line may work great for you. In the end, it all depends on 
wliat your needs or desires are. If you are looking for a 
commercial application that can help you reliably with 
backups and data transfers, we found Navicat did I he job 
well. 


CD Korn Version: $109 
Download Version $99 

Availalile from: http://www.navicat.com/ 
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Introducing 

The Bird Killer 



No surgery 
required! 




Antennas 

Whips I Plug n' Plays 
Base Station 


Transceivers 

Base Station ] Mac Mini 
Power Mac 



Handles 

Power Book | iBook 
TiBook 



Signal. Strong signal. That's what you'll get 
from this inventive new wi-fi extending product from 
QuickerTek. The Bird Killer attaches to the outside 
of any iBook or Powerbook — no Internal tinkering 
needed! To learn more about this, and other Mac- 
friendly inventions, visit www.quickertek.com 
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stay In Control Wherever You Go. 



Netopia’s products have been the leading remote 
control and web-based remote access solutions for the 


distributed enterprise, 


Choose how you want to manage your computer 
network and communicate with those working on 
or off-site, quickly, easily and securely. 




THERE 


or Windows 


Timbuktu® Pro 

Whether you're at home or at work, using a Mac OS or Windows platform, Timbuktu 
Pro allows you to operate distant computers as if you were sitting in front of them. 
Transfer files and folders quickly and easily, and communicate by instant message, 
text chat, or voice intercom. 

eCare 

eCare’s web-based remote access capabilities enable any user to securely place their 
virtual eyes and fingers directly on the remote client’s desktop for collaboration, 
problem resolution, and improved customer satisfaction. Using only a web browser, 
eCare's secure and fast screen sharing, file transfer, live chat, URL push and live 
session recording make it the ideal solution for the conference room, classroom, or 
help desk- live, on demand. 

Download an evaluation or buy it online: www.netopia.com 
Call U5 at 1-800-485-5741 

® 2005, Inc- Alf rights reserved. Metepie, the Netopia design, and Tiinbukto are registered trademarks belonging to 

Netnpia, registered in the U,S, Patent and Trademark Offie®. All other rrademarks are ihe property of their respective owners. 

[11 X timbuktu"pro * eCare netopia. 



















Quantum’s SDLT 600 
Tape Drive System 

By MacTech Staff 


Quantum is in an interesting position in tiie 
market* in llial they are leadens with l>oth their DL'J' 
and LTD teclinologies. Both of these technologies are 
great* and have multipJe sources for media. The first 
priority for DLT is capacity, and Uie first priority for 
LTD is speed. That said* LTO's capacity is terrific* and 
DLT’s speed is no slouch either. To he fair* DTI. was 
invented by Quantum. LTD, on die other liand* was 
invented by IBM. Quantuin acquired Certance a 
while i>ack which gave them a firm ftx>thold in the 
LTO market* allowing Quantum lu give their 
tmstomer.s a wider array of choices. 

For MacTech* capacity was the highest priority, so 
we went the DLT direction. There are several 
different levels of Dl'f from the most economical to 
the higliesl capacity. The latest in the DLT family is 
the DLT-S4 which liokls a whopping 1.6 terabytes per 
cartridge (compressed) wliich is twice the capacity of 
the I.TO-3 standard* and nearly three times the SDLT 
600 that we seleeted for tliis review. 

Wliether yoti choose DLT or LTO, theie are a 
variety of auto loader and library solutions for you to 
chrK)se from. It's all a matter of l>udget* and how 
much you need to !>ack up, Botli have nratl maps for 
the future. Dl/f Is on path to ultimately gel to 14 
terabytes per cartridge. 

The lioiiom line is chat no matter what you 
decide* DLT or LTO* you are Ixnind to lie plea.sed. 
Both are great technologies, with great brands 
liehind tliem, lots of tape vendors* and are speedy 
with high capacity. 

The SDLT 600 

SDLT 600 tape drive systems are at the upper end 
of Quanumfs line of digital linear tape drives tliat 
include the SDLT 220, SDLT 320, and of course* the 
new' DLT-S4. Tlie vSDDf 600 tape drive system 
comprises Ixiih the tape drive and the data cartridge. 
The tape system is available in ftjur versions* an 
internal unit for server installation* a tabletop unit* a 
rack mount* and a library model for in.stalling in tape 
automation systems. Tlie tape drive provides 3(K) GB 
of storage caj^acity with a transfer speed of 36 MB/sec 
in native mcxle* and 600 GR of .storage capacity with 
a trxinsfer speed of 72 MB/sec in compressed mode. 


MacTech has regularly been able to get 450 GB out of 
tapes in real world usage. 

SDLT 600 contains on-board hardware to compress 
and decompress data using a DLZ algorithm. The dehiull 
setting for data compre.ssion is on. This system utilizes 
DLTSage, a data management solution that allows users to 
manage* predict and prevent problems before they octajn 
It also comes with DLTlce, which provides WORM (Write 
Once* Read Many) archival funcikinaliiy* although we did 
not experiment with this. 





Quantum SDLT 600, Dual unit Rack Mount Version 



Quantum SDLT 600 Table Top (External) 


34 April • 2QQB 


WWW.MACTKH.COM 





Nitty Gritty Details 

For chose that care about ilie niicy gritiy details, SI)l/r 
600 has 40 logical and 640 physical tracks with a track 
density of 1502 tmcks per inch (tpi). Linear bit density is 
233 Kbits per inch (Kbpi) wilit read/write tape speed of 
108 inches per second (ips), rewind tape Speed of 160 ips» 
and linear search rape speed of l^iO ips. The average 
rewind time, maximum rewind time, average access time 
(from Ix^ginning of tajxO^ and maximum access time (from 
beginning of tape) are 77, 156 seconds, 79, and 190 
seconds respectively. The typical load from the beginning 
of tape time and unload to beginning of tape time are 18 
and 19 seconds respectively, white load to beginning of 
tape for unfcjinianed tape takes 63 seconds. Nominal tape 
tension is 3^0 ± 0.5 oz for stationary drive, and 3*5 ±0.5 
07. at operating speed, 

SDIT 600 is a streaming tape drive that uses half-tnc It 
wide Su|x.T Digital Lint^ar Tape (MR-S2MQN-01) media 
and offers backward read comi>atil>iIiiy with (he SDl.T 220 
and SDLT 320 tape drive fonnats, Super DLTcape I data 
cartridge Lyf>e, and the DIT VSl60 tape drive format with 
DUFtape VSl data cartridge type. Ti doe.s nol, however, 
have the ability to use the older DLT tapes that Icxjk like 
tlicy would fii, but don't. Definitely do not try this: you 11 
damage the drive. 

'Fhis tape drive utilizes the SDLT Cleaning (MR- 
SACCL-OI) canridge. But, don1 go out and buy a ton of 


these they work for 25 cleanings, and you should not 
clean proactively, only whem the drive asks for it (tlirough 
the indietttor light or softw'are). After monilis of using this 
drive for every day backups, weVe yet to clean it. 

Tills prcxlucL is powered by Quantum's Laser Guided 
Magnetic Recording (LCMR) iechnok>gy^ that provides a 
combination of the optical and magnetic lech neologies, 
resulting in higher capacities by substantially increasing 
the number txf recording trat'ks on the data-bearing 
suriace of the media. It is ec[uippcd with Fivoiing Optical 
Servo (POS), a Quantum-invented, optically-encoded 
servo system, that combines high-density magnetic 
read/write data recording wiih laser sem> guiding. The 
system also features Magneto Resistive Ckister (MRC) 
heads, advanced ParTial Response Maximum Likelihood 
technology, Advanced Metal Friw'der (AMP) media, and 
positive engagement tape leader buckling mechanism. 

SOFT 6(X) also comes with the TapeAlert feature that 
enables constant monitoring of the device’s hardw^are amd 
media for errors and ixjiential difficulties l)y an internal 
SDLT firmware. It Bags any problems idenitlic^ on the 
SCSI log page, w^here 64 bytes are reserved for TapeAlert, 

This Lii^e drive is available wiih either l.JItra 160 SCSI 
or Fibre Channel interfaces. The Ultra 160 SCSI interface 
provides a low-voltage differential (LVD) mode running 
up to 160 MB/seeond and a single-ended (SK) mode 
running up to 40 MB/sec. Fibre Channel interface runs at 
speeds up to either 1 Gb/sec or 2 Gb/sec, depending on 
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the configynirion chosen during instalkition. Fibre 
Channel can support up to 126 devices in a Itw^p 
c:onngiimi!on. U>ng wave transceivers Cwtlli ni>er optic 
cable) support distances up to 10 Kilometers, and the 
shortw^ave transceivers (wiili fiber optic cable) suppon 
distancres up to 500 meters. 

We tested the Ultra 160 SCSI version in our installation, 
llie projected MTT^F {mean time l>etween failures) for 
SDLT 600 is 250,000 hours, I lead life is a minimum of 
30,000 tape motion hours, and an average of 50,000 media 
motion hours. In terms of media duraliility, the number of 
media passes and full media uses to eKpect from a Super 
DLTiape 11 data caitridge are 1,000,000 and 250 
respectively. In terms of data c'ailridgc life expectancy, the 
numl^er of load/unload cycles and media insertions to 
expect lx.'lbre the data cartridges need to he replaced are 
5,000 and 20,000 respectively. The positive engagement 
tape leader buckling mechanism engages the tape leaders 
upon data cartridge load, and disengages them upon data 
cartridge unload. Ihis allows buckle ann components 
including take-up leader, sujrply leader, and the media to 
function fc^r at least 250,000 cycles on an SDLT 600 tape 
drive witliout failure, breakage, or binding. 

Conclusion 


Deloiled billing diredly from OPEX. 

Quality electronic and telephone customer support. 
No monthly billing fee if 
your bill Is over $20.00 each month. 

(NOTE; $2.00 blitng fee is charged when your hill & under $20.00.) 



This product was simply a pleasure lo review, and to 
have in our network. It's must be pan Macintosh, as from 
day one, we plugged it in, and it just worked. Two 
ihumbs up! 

We found an assortment of online re.sellers for the 
two tape drives with prices as low as: 

Quantum .SDLT 600 Internal: $ 2,899 
Quantum SDLT 600 External: S 3,099 

For more information visit: http://www.quanttjm.com 
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Intranet Search and Archive Management for Creative Workgroups 

Digital storage Manager is the first intranet search and archive management system for creative and 
prepress workgroups. Digital Storage Manager offers: 

- Ability to search and instantly find files by production related metadata. 

* A simple one-step Archiving solution including integration with: CA Software ARCserve, Rtmage, 

EMC Dantz Retrospect, Mac OS X File Burner, Roxio Toast, Microsoft Removable Storage Manager. 

Secure Web Portal provides your customers, freelancers or other departments the ability to search 
and download files via the web. 

Integrates with existing job or production management systems, including FileMaker Pro, 
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Products for Small and Medium Business 


EMC-lnsignia 
Retrospect 6.1 for 
Macintosh 

By MacJech Staff 


If youVe been around ihe Mac oiarket for a 
while, you know of Retrospect. Originally created 
Dantz (which was acquired by EMC a while back), 
today Retrospect is under the brand EMC-lnsignia, but 
ir*s still the same familiar Retrospect you are used to. 
Retrospect 6.1 for Macintosh is designed to 
automate cost-effective protection for small and 
medium businesses CSMRs). While lagging behind 
Retrospect 7 for Windows, Retrospect 6.1 for 
Macintosh provides a solid backup solution for file 
servers, desktops, and notebook computers. 

Retrospect 6,1 for 
Madnu>sh is available 
in Sei-ver, Workgroup, 
Desktop, and Express 
editions. The Server 
and Workgroup 

editions of Retrospect 
eater to business 
envinmnieiiLs with a 
client/server 
approach. Retrospect 
Server edition comes 
with licenses to 
protect 100 networked 
servers, desktops, and notebooks. Retrospect 
Workgitnip edition provides licenses to protect 1 
networked server and 20 desktops and notehtK>ks, 
licenses for additional networked conipulers can be 
purchased separately. Retixjspeci Desktop edition is 
designed to provide capabilities of Workgroup atid 
Server editions to home users. Retrospect Desktop 
edition provides licenses for 2 networked computers. 
Retrospect Express edition is available exclusively 
with backup devices. 

Retrospect 6.1 for Miicintosli Server and 
Workgroup editions can be run on any server running 
Mac OS X Server 10.1.5 dirough Mac OS X Server 
vlO.4 Tiger. Retrospect Server, Workgroup, and 
Desktop editions can be run on any 
desktop/nQtel:)ook nmning Mac OS 9 or Mac OS X 
10.1.5 thrcjiigh Mac OS X vlO.4 Tiger. Retrospect can 
be used to prcjteci networked desktop and notelxjcjk 
clients nmning Mac OS 7T or later, Mac OS X 10.1.5 


Tluough Mac OS X vlO.4 Tiger, Windows XP, Windows 
2000 Professional, Windows NT TO Workstation, 
Windows 95/98/Me, and Red Hat Linux (versions 6.2, 7.1, 
7.2, 7*3, 8, and 9). Retrospect provides protection to 
networked sewers running Mac OS X Server 10.1.5 
through Mac OS X Server vlO.4 Tiger. Retrospect 6.1 for 
Macintosh Server, Workgroup, and Desktop editions are 
compatible with l>ackup devices inchiding hard drives, 
reint}val)le drives, CDs/DVDs, servers, and tape 

drives. Retro.spea Server and Workgroup editions also 
.support tape* autoloaders and lihniries. 

The minimum hardware recpiirements to run 
Retrospect are a Macintosh G3 or I letter and Mac OS X 
version 10.1.5 or later. Retrospect Desktop edition 
requires minimum of 128 MB RAM (256 MB 
recoil imended). Retrospect Workgroup and Server 
editions require minimum of 256 MB RAM (512 MB 
recommended). Retrospect also requires a hard drive with 
a minimum of 200 MB free space. But, let’s be real. You 
want at least a G4 running this software, witli a 
reasonable amount of liAM, And, w'hile Retrospect does 
nin on earlier versksns of Mac O.S X, we strongly 
recoininend that you work with at least 10.3 especially if 
SCSI is involved. In the end, you need to assess your 
needs and adjust appropriately. 

In case you are used to AppleTalk su[:>poit, note that 
the most recent versions of Retrospect work on 'LCP/IP, 
not AppleTalk. Not a big deal for most, hut Irnportant to 
some witii older systems. You need tt) have TCP/IP on 
Ctich machine, even tliose on Mac OS 9- 

The “Backup Set” 

A backup set is the basic building block of 
Retrospect, which comprises one or more disks, tapes, 
or discs, or a file or FTP site. The various types of 
backup sets that can be u.sed with Retrospect are tape 
backup sets, CD/DVD backup sets, removable disk 
backup sets (Zip, Jaz, SuperDisk, DVD-RAM, MO, as 
well as USB and FireWire liard disks), and Internet 
backup sets. For a backup, the source is generally a hard 
drive or a folder on a hard drive (Known as volumes and 
su 1 wolu mes respectively). 

In our test scenario, we backup to multiple media: 
disk, over the Internet, and to the SDUf II SCSl-3 drive. 


{ iMC Retros|iect 

i jr Macintosh 
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This variety of scenarios, along with ease of use, is the 
type of thing that Retrospect excels at. 

Ketrospecr uses an archival method of backup chat 
ensures Ixicked up files are not deleted or written over 
until requested by user Retrospect touts their patented 
IncrementalFLUS technology to perform backups, which 
ec>pies only files that arc neW' or have clianged since the 
previous backup to the same Ixickup set. Tliere is no 
need to specify a “full” or “incremental" backup. 
Retrospect, by default, copies only the files it tiasn’l 
already backed up to the destination backup set. 
Retrospect uses a catalog file (stored on hard disk) to 
track the different generations of mrxlified files in a 
Imckup set. Tlic catalog enaliles a search of files 
eliminaiing the need of searching the backup media 
itself, (This is one of the places that you really want to 
have processing power and kAM,) 

Retrospect’s usage of IncrementalPLUS backups may 
result in several versions of a rile scattered among several 
backup sessions waihin a backup set. This makes for faster 
backups, but it is a bit of a pain when you do a restore as 
yotfll have to insen every tape, one at a rime. Frankly, 
it's the right way to do this otherwise backups would take 
forever and you'd be changing tapes all the time during 
backups (much worse)! 

A list of all versions of all the files in the backup set 
would be overwhelming. To avoid this proljfcnu every 
time a backup is performed. Retrospect places a 


“Snapshot" of the source volume in the backup set. A 
Snapshot is a list of all files and folders on a volume when 
if Is backed up. For each volume, one Snapshot is stored 
in the catalog and a copy of die same Snapsiiot is stored 
on the Lxickup medium. The old Sna[:>shot is replaced 
with a new one after each successful backup operation. 
Old Snapshens on the backup medium are not deleted. 
Retrospeet can use a Snapshot to restore, in case 
restoration of a backup is required. Snapshot can also be 
used as a guide to see the volume as it was at a given 
l>oini in time, and then pick and cliocjse individual files to 
restore. This is sonw of the mosi: powder fill .stuff that 
Retro.spec't has to offer, and a reason that Retro.spect can 
l)c used in so many diflcreni ways. 

Reir(3speci Clients can extend the backup and restore 
capabilities of Retrospect to other computers on a 
network, Retro.spect can back up clienLs on the network 
without the tieed for installing file servers, starting file 
sharing, or mounting volumes. Retrospects Backup Sender 
offers scripted backups, which prioritizes the volumes 
most in need of backup and copy their files to the 
avaikible backup set containing the least current data. 
Backup Server technology \s suitable for environ menus in 
wJiich mobile computers and removable disks irregularly 
appear on the network. Retrospect client users can even 
initiate backups of their volume.s. A Backup Server script 
is oftcti used along with regular I jackup scripts to produce 
an elaborate backup strategy. 
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Retrospect 6.1 for Macintosh provides a numlx.T of 
ways Lo pnoicci and rcsiorc daia including two basic 
categories of opeiations: immediate openttions and 
automated operations* Inimediate operations are 
initiated inanuiilly and exccuied ininiedialcly. Tiiey 
include backup, archive, restore, duplicate, and transfer. 
Inimediate operations can l>e automated by creating 
scripts. Tliese scripts automate ilic rcix^liiive tasks of 
these o[x:rations. Rctios[X.^ct offers tliree ways to create 
.scripts: the Eitsyi^cript Wizard, sclieduling an imtiiediate 
operation and using ilie AutomaLeXScripis cotnniand. 

Retrospect uses hardware intensively, to transfer 
large anK>unts of data l>etween a source volume, such 
as a hard disk, and a backup device, such as a tape 
drive. As you might imagine, Retrospect is the “king 
of drivers", and is alile to communicate with hardware 
devices using a wide variety of cechnoiogie.s incKiding 
SCSI, fibre Channel, AfAPt, FireWire, and IISH. 
Retrospect supports Fibre Ciiantiel tape drives and 
tape libraries using Foint-'Ib-Foint, Arbitrated Loop, 
and Switched Fabric topologies. 

Backups Over the Internet 

One of the things ihat we wanted to tackle in the 
Lest arlicie is backing up telecommuter.s and satellite 
offices. There are a variety of ways to do tliLs that we 
exjierimented with: mounting volumes over AFF, 
backing up a remote client and more. In the end, the 
way that worketl liest was to u.se Retrospect Servei to 
push data to Rettosfiect Client ntther than the typic’til 
pull data from the client. In other words, nt)rmally the 
server ts aiiachcd to the storage device for the backup. 
You would pull data from the client to the servei; atid 
store it on tlie tajie or liard drive art;iched to the .seiver. 
In "push" methodology, you would use the Rem)siiea 
Server software to [lusii data via the Retrospect Client 
insiaDed on the backup server where the fiackiip stored. 
Seems a bit unusual, but it wt)rk.s great. 

Depending on ytRtr setup for a remote install, 
you could simply have your Retrospect Server talk 
to tile client over the Internet, and that will work 
fairly well* Tlie one issue with this is that your 
Retrospect Server will not be able to work on 
anything el.se until that backup is done. We chose 
to avoid this as our backups would not be able to 
finish overnight in the test scenario, 

A second approach would lie to u.se FTl^ or AFP to 
mount the volume, and then write to it. While Lliis 
approach can work, iPs not paiticularly re.silient to [loor 
Internet connectivity issttes, and more importantly, it is 
painfully slow over mcxlerate net connections like DSL 
or cable modems. The slowness is really not alxiiit tlie 
copying time, hut die .sc'^mning time. It is very slow to 
sc'an a remote macliine inounted on the Itxal desktop* 


The approach diat we ended up with was to install 
Retrospect Client on the backup server, and then use 
Retrospect Workgroup to copy the data from the remote 
office up to the backup server using tlie Client on the 
backup server Feels a bit liackwarcls at first, but it works 
great and transparently. In fact, we went one .step fun tier 
and had a workgroup server running Retrospect 
Workgroup at the .satellite office, copying relevant data on 
each machine in that office lo the workgroup server (in 
other worcls, do prep work by consolidating all tlie data 
that we wanted lo backup to one folder). Then, we 
“upstaged" that data from the prep folder to the main 
liackup server by ninning Retrospect Workgroup at the 
satellite office, and using Retrospect Client on the main 
backup seiver. 

The telecommuter that we had in the test nem^ork 
would do the same tiling as the satellite office, hut only 
one would work at a time (given that currently, the 
Retro-spect Client can only talk to one ser\^er at a timed 
llie cool thing is that the second network liackup will just 
.sit and wail until die Client is ready* So this works fine. 

Doing this allowed us to still make daily backups (and 
snapshots) to tape on the main backup server, and gave 
us a very' poweiful backup solution. 

If you do set things up in this way, we strongly 
encourage you to use Retrospecf.s "Link Kncryplion" so 
that what you send out over the Internet i.s encrypted. On 
slower machines, working exclusively within a LAN, this 
could have a performance impact, but, over the Internet, 
the bottleneck will he your net connection. 

One last thing: we found it useful lo have the Irackups 
croming in over tlie Internet to go over the second 
Fthernel interlace so as not to take anytliing away from 
the I.AN backups. We did this with a scfxiratc IP address, 
and at time.s, we even did traffic control to move this 
traffic over our backup connection at the main location 
(instead of the primary^ location). 

MySClL and Retrospect Don’t Like 
Each Other 

One [.ssue that we ran into with Retro.spect is live files. 
In oui’ case, one of our Xserve'.s is a live web .server and 
runs MySQL. A.s you might imagine, MacTcch's wcl^ site 
gets more than a little bit of traffic, and die MySQL server 
is hit constantly for a variety of reasons. Whenever 
Retrospect would back up this machine, it would literally 
bring die Xserve to its knees and we would have to restart 
the Xserve to recover. 

To get around this, we had to “exclude" MySQL files 
from I he backups, and u.se .something different to hack 
them up {.see Navicai article). And, as we mentioned in 
the overview anicle, we made sure that any of die 
database servers (FileMaker, Now Uf>-to-Date event 
.server, etc.*.) all used tlieir own method of backing up a 
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cliitaba.se to the local disk* Retro-spect w^HJld just back up 
those snapshots when it lxu:kecl up that server. 

Cross-Platform Backups, 
Retrospect for Windows 

One of the nice tilings alx)ut Retrospect is that it does 
support a variety of different OSes. Wliile iliat may not 
lx? as extensive as other applications on other platforms^ 
it you are primarily a Mac network with some Windows 
machines on it, yotrll have no problem running 
Retrospect Server an your Mac* 

Be careful aliout updating your Wiixkws client 
macliines if you are using RetroS|X^ct Server on ihe Mac: to 
back up those machines, Tlie Windows version is aiiead 
of the Mac version as we speak, and you could run into 
capability issues if the Windows version gets too far ahead 
of the Mac version* 

Rotating Sets, Off-Site Backups 

WeVe always told people '"don’t backup what you 
can afford to lose," Of course, we were trying to drive a 
point home on die importance of backups. But you 
.should really take this a step further: **dt>n't keep an offsite 
backup for anything you can afford to lose," 

The next question is what is the best approach. 
Some [people have one backup set (e.g., a set of tapes) 


for each day of the week. In our test case^ we found 
that the tapes held so much data that we could take a 
different approach and not changes tapes often. In that 
approach, we simply use t wo sets, and keep one off site 
at all times. We switch them once a week, so our off¬ 
site backup is never more than a week old, and we 
retire sets every 3 months to keep the tapes maximally 
fresh, and tape sets small. 

You need to find the mix of rotations, and retiring 
backu[) sets that works best for you. ft will definitely 
take some experimentation as there's a nearly infinite 
number of ways to go. 

Conclusion 

If you are looking for easy to use, easy to set up, and 
a tried and true solution for small and medium sixe 
businesses, or even at home, Rein>spect 6.1 Ls a great way 
to go, and we recommend it wholeheartedly. 


Retrospect Server v6.1j $799-00 
Retrospect Workgrtiup v6*l; $499.<X) 
Retrospect Desktop v6.1: $129.00 

Available from: hrtD://www.emcinsignia.CQm/ 
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MacWorld “Best of Show” Winner, 
CRYPTOCard introduces 5-User 
Kit for OS X, the “AII-ln-One-Box” 
Authentication Solution that lets 
your security grow with you. 


CRYPTO-Server 6.3 is the Mac-centric authentication solution for IT 
nfrastructures organized around Mac OS X. Once implemented, your 
Mac becomes the centralized authentication and token management 
system for all users, regardless of their computing platform or location. 
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Internet Connect MSCHAPv2 (Tiger) 
Cisco VPN Client for Mac Integration 
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• RADIUS-enabled systems 
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-Apache, US, Cithx 
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PNN^r Expansion Options 

JIM PI Y ^ASr from Sonnet 


By MacTech Staff 


Expandability 

One of the IxrduUful things uboul a PowerMac G4 is 
how expandable it is- Even more so than today’s 
PowerMac G5s in some ways. 'Hie PowerMac G4 has an 
ample power supply, plenty of room for drives, and was 
designed tliiit way in tlie lieginning. Willi 5 drive slots in 
adtiition to the optical drive and floppy, tlierc's a lot of 
nmm in there. 

'Il’ie problem is that, dei^nding on the nnxlel, earlier 
PowerMac G4s do not natively supjxjrt drives other than 
IDEs ihai are less than 128GB, Obviously, for a backup 
system, youD warn id take advantage of the larger drives 
that are available and economical today, and you have 
two choices as to how to go about doing this. 

In addiiion, since this i,s a backup system, you may 
want to take your PowerMac G4 from 10/100 Ethernet to 
gigabit. Just throw in a PCI card and you1l liave it. You 
can also make use of multiple Ethernet interfaces 
simultaneously, anotlier handy setup for a backup 
system. Also, don't foi^et about IP over Firewire as 
another network connectivity option. 

Modern ATA and SATA 

The first way to increase the storage capacity of a G4 
is to go with a more modem vers[t)n of tlie ATA standarci. 
With a I^Cl card you can put into your Pow'crMac Cj4, you 
can handle drives larger ihan 12BGB. You am do this 
either with individual drives, or as a RAID setup. 

'fhe sc^'ond way Ls to put Serial ATA (or SATA) drives 
into your l\)werMac. They look very similar to the 
former ATA drives bui lK>di the power and the inierhice 
cabling (not to mention tlie interface itself) is differtmt. 
SATA drives are what newer Macs (PowerMac 
iMacs, and Xserves), SATA has the benefit of being very 
economical and availa])le in tlie larger sizes. 

Well take a look at interface cards for lx>th of tliese 
options, l>ul unleSvS you have a specific need, or drives 
you are trying U) support, we advise moving everything 
to SAI'A that you can. 

Tempo RAID133 

Tempo RAID 133 is an ATA Imdware RAID coniitjller 
that can be used to connect high-performance ATA Itard 


drives into Power Mac G3 or G4 lo create fast iiardware liAlD 
volumes economically. Tempo RAID 133 is compatible with 
Apple Power Macintosh G3 anti G4, and it supports Mac OS 8.5 
through 9.2.2, and OS X (which is obviously w'here we're 
focused). Tempo RAID133 supports A[>ple Drive Setup Utility 
(version 1.5 or later) or other third-party software for drive 
fonnatling, but also Mac OS X's Disk Utility. 

Equipj^ed with hardware RAID leve) 0 (striping), Tempo 
RAID133 supports up to two volumes (two Al'A/TDE hard drives 
per volume, ftmr drives total) of internal drives. I’empo RAID 133 
supports drive types including any ATA/IDE fixed media hartl 
drive such as Ultra ATA/33r Ultra ATA/66, ATA/KX), and 
ATA/i33 Tempo RAini33 features finlxxtrcl 32-bit PCI Bus 
Ma,ster and it supports drive protocols through ATA6. Tempo 
RAID 133 offers data transfer mle of 133 MB/s t>er cliannei witli 
Ultra ATA/133 and up to 133 MB/s in burst master cycle. 



Tempo RAjDT33 

Tempo RAlD133's striping function provides significant 
performance gains over a single hard drive. The 
improvement makes TcmfXJ RAiD133 suitable for disk- 
intensive tasks such as multimedia authoring, image editing, 
and of course, our goal of backups. Tempo KAID133 utilizes 
onboard Open Firmware, which allows booting from 
attaclied drives to shorten start up litiies and speed Mac OS 
operation, 'fhe onboard firmware automatically recognizes 
and configures the drive type, in addition to 80-wtre cable 
with Ultra ATA/66, ATA/100, and ATA/133 drives, ll Is 
backward compatible witli ATA/33, ATA/66, and ATA./1Q0, 
and is FlasIrROM upgradeable. 
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Lasso Professional Server 8.5 


Universal Binary 
for Intel Macs: 

Natrve support for 
the best speed 
and compatibility. 


Includes AJAX Tags 

Built-in LDAP 

Connect to 

and Functions: 

Integration: 

Any Database; 

Supports Web 2.0 

integrate Lasso 

Including Oracle, 

techniques for modern. 

with office data 

PostgreSQL, MySQL, 

dynamic Web design. 

and login systems. 

FileMaker, ODBC, and JDBC. 


Improved DNS, Email, 
iCal Support: 
Extending Lasso's support 
for Internet protocols and 
open standards. 




4 FREE well commented Lasso 
solutions to get you started; 

Blog: Teaches beginners and advanced users 
alike how to create an online diary, or web log. 

QuickPoll: Add a poll to your Web site with a 
question and answers, cast a vote or see results. 

Collaborate: Enables knowledge sharing among 
a group of developers and administrators to 
streamime Web site development from remote 
locations or geographically dispersed teams. 

Message Board: Source code for the 
Message Board solution is completely 
open and expandable to suit your needs. 


SOf rWA HE SOOfi OmniPiitri StidwiirifH Irre. 


Special Offer 

FOR MagTech readers 



Try Lasso Professional Server 8.5 
30 days. 


WWW, TryLassoxom 
lassosales ^omntpifot,com 
800 678-9958 


Then get 60 days of FREE 
support with your purchase. 
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Advance features of Tempo RAID133 include coexistence 
willi SCSI and onboard IDE devices, support for siniulUineoiis 
operation of multiple cards^ and CUC error checking ensuring 
data integrity with Ultra ATA/133 drives. Tempo RAID133 comes 
with 40-piny8(Twire IDE cables (two included; 80-wire cible 
required for full Ultra A'l’A/66, A'i'A/lOO, anti A'lAyi33 support). 
The package also contains a quick start guide, ptrwer supply "Y’' 
cjble, and 8 hard drive rriounling screws. Tempo RAID133 is 
priced at $149.93 and it is available with 3-year limited wananty. 

We found this product to be a great experience. Ifs not 
only Hexibie in allowing you to work with different sizes and 
kinds of drives, but it's simple to install and works as advertised 
,.. just as you would expect on the Mac. 

Tempo Serial ATA and Tempo Serial 
ATA Cable Kit 

Sonnets Tempo Serial ATA PCI adapter card enables 
connection of Serial ATA (SATA) and parallel hard drives to older 
Macintosh computers. Tempo Serial AIA can lie used to take 
advantage of SATA’s higher data transfer rates and improved 
t:abling fK^formance. Tempo Serial ATA features 48-bit LBA 
support for drives larger than 128G13 and support for mirroring 
and striping features of OS X. lempo Serial AIA requires Mac OS 
8.0 through 9.x, and Mar OS X version 10.2 or later. It supports 
Mac OS b(X)Uiliility from attached drives. Tempo Serial ATA runs 
on a 32 bit, 33/66Milz PCI bus and it is compatible with 32-bit 
PCI bu.s version 2.2 and hard drive or peripheral pt>wer 
ccjnnectors. The card cojucs with 2 internal Serial ATA interface 


connectors that each support up to 2 hard drives. Each port also 
offers data transfer rates of up to 130 Mbytes/second or burst 
data transfer rate of 1.5 Gbits/second, Drives mtxles supported 
l]y the product include Serial ATA, Ultra DMA modes 
675/4/3/2/1/U, and PiO modes 4/3/2/1/0. 



\ 


Tempo Serial ATA PCI Card 

Advanced data features include compliance with the Serial 
ATA LQa specification, bus mastering that off-loads data I/O 
handling from the CPU, 32-bjt CRC error checking for all hies 
iransmitted (cf)mmand, data and status), offering enhanced data 
[)rotcction for liigh-si>eed Serial ATA drives. It also sports dual 
independent data channels allowing separate device timings, 
automatic klenlificaUoo and ct in figuration of drive types, and 
automatic detection and sufiporl for devices utilizing many 
transfer modes. 




Connect • Communicate • Collaborate • Securely 


Kerio MailServer 

A groupware alternative to 
Exchange that syncs calendars, 
contacts and email with Entourage 
and Outlook. Integrated anti-spam 
and McAfee virus filtering provide 
secure, junk free email for users on 
any platform. 

Mac 05 X - Linux - Windows 


Because meetings are more productive when 
people are on the same page... of their calen 


6 feaiio hw;. AJI Tfghu All olhtf ufypwly lK>'r uwiiet^. 


KERIO 






# 



3,248 hours typing code 
184 hours finding that one bug 




142 hours of meetings 
108 pizzas 


16 


14 cancelled weekend trips 
* 11 all-nighters ' 

1 call protects it all! 

i 
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SOFTWARE p ;ff M 

#1 CfioTce of Software Developers 



The new HASP family of products is the 
next generation in protection ensuring the 
highest level of security for your software. 

It provides an easy set of tools to automati¬ 
cally protect your software and implement 
new and innovative licensing options. 



^ Strongest anti-piracy solution: 


mcmmmA 


Our powerful, 128-b(l AES 
encryption provides a 
strong locking nr>echanlsm 
ttiat ensures you get 
paid for every copy of 
your software. 



EHiCBYPTBO DATA 


^ Best overall solution as rated by 
an independent testing lab: 

Ir^ KeyLabs tests, HASP HL outperformed 
the competition in security, ease-of-use, 
flexibility of tools and functionality, 
and compatibility across platforms 
and environments, A copy of the full 
KeyLabs report is available from our 
Web site at www.aladdin.com/hasp. 


► Robust envelope: 

Aulomattcally proteas Windows 
executables. DLLs. Net and 
Mac applications, securing the 
weakest link and ensuring your 
valuable IP remains unreachable. 
Multiple protection layers 
provide unegualed security. 


Random multi fHg 
protection layers 



Category 

Weight 

Aladdin Sentinel 
HASPHL UltraPro 

Security 

35% 

05.1% 

60.9% 

Ease-of use 

25% 

93.7% 

77% 

Licensing 

20% 

7S% 

75% 

HevUpility af tcwls 
and functiofiality 

10% 

93.3% 

71 

Ctumpatjbility across 
plarfotms and 
Pfwironnicnts 

10% 

93J% 

71% 

Overall Evaluation 


87J% 

69.0% 



Request a Software Deve!oper Kit today at www.aiaddm.com/hasp 


Aladdin 

SECURTNG THE GLOBAL VILLAGE 


North America: 1-800'S62-2S43. S47-&1fl-T800 •UK " Germany • Israel • Benelux ■ France * Spain • Asia Pacific • Japan 
C12D05 MaWifi Knwldqr Ijct AH righis rsi^Eved. AkWiiiftiKi HASPae ofAktddiii irdWiiideiivs* ludfm^rti or irjifemarksof tfieirrcspetliw holders. 




























lhL\se cards can in a wide variety of 
older systems even lieyood tlie PowerMac G4 that we're 
focused on for this series of articles. Specifically, Tempo 
Serial ATA can be used with Mac conipatible computers 
including Power Macintosh Series 4400, 6400, 6500, 
7200, 7215, 7220, 7300, 7500, 7600, S200, 8500, 8515, 
8600, 9500, 9500/180MP, 9515, 9600, 9600/200MP; 
Macintosh Server G5, G4; Power Macintosh G3 All-in^ 
one, Blue ik White, Desktop, Minitower^ Power Mac G4, 
Power Mac G5, Performa Series 6400, 6410, 6420; 
Workgroup Server 7250, 7350, 8550, 9650; Day star 
Genesis and Millennium Series; Maetell XB-Pro; Power 
Computing PowerBase Desktop and Tower, 
PowerCenter, PowerCenter Pro Desktop and Minitower, 
PowerCurve, PowerTower, PowerTower Pro, 
PowerWave; StarMax 3000, 3000 Minitower, 4000, 4000 
Minitower, 5000, 5500; ;ind UMAX 0500, C600, C600X, 
J700, S900. ?hew4 

Cooling in a PowerMac G4 works fairly well, but 
neveitheless, iPs always good to know what these cards 
require for an operating environment. The operating 
temperature twinges of Tempo Serial ATA are 5 to 55 
degrees C. I'he operating and non-operating relative 
humidity ranges are 20 to 80 % anti 15 to 90 %. The 
package of this product contains Tenip<y Serial ATA 2-P(jn 
PCI controller card, quick start guide, 1 Serial ATA data 
interface cable (22 inches), 1 legacy-to-Seriul ATA power 
cable, and drive moiiniing screws. 

Tcm[x> eSATA data cables are designed to connect 
a SATA host controller such as Sonnet's Tempo SATA 
H4P, lenipo SA TA X4P, lempo-X eSATA 4+4, or Tempo- 
X eSATA 8 to Serial ATA drive enclostires. The cables 
feature external Serial ATA (eSATA) connectors, 
equipped with springs similar to USB, designed for 
over 5,000 insertions and removals. They are equipped 
whtli extra shielding and metal contacts for better EMI 
protection Tempo eSATA data cables come in length of 
1 meter and eSATA-ro-eSA'l'A, or eSATA-to-SATA I styles 
SATA-2/1 connects a host controller card with eSATA 
connectors to an external drive enclosure with SATA 1 
connectors, SATA-2/2 connects a host controller card 
with eSATA connectors to an external drive enclosure 
with eSATA connectors. 



Tempo Serial ATA is priced at $79-95 wiiereas Tempo eSATA 
data cable kit costs $24.95> Both prtxIucLs come with 3-year 
limited w^arranty. 

Gigabit Ethernet 

lo our scenario, we not only wanted Internet backups to 
happen, but also faster gigtibit Ethemel connectivity. By adding 
in a Sonnet Gigabit card, we were able to focus the LAN backups 
over rhe faster gigabit Ethernet interface, while letting the 
connectivity over the Internet go over the built-in Ethernet 
interface. 

Presto Gigabit is a 10/100/1000 Gigabit Ethernet PCI 
adapter card that is compatible with most PCI Power 
Macintosh configurations. Presto Gigabit is based on Sonnet’s 
Simply Fast Design, making it easily installable. Presto Gigabit 
supports full and half-duplex communication and it features 
IQOO/lOO/lOBaseT auttj-negoLialion, Presto Gigal}iL features 
one RJ-45 connector that supports lOOOMbps, iOOMbps, 
10Mbps network speed and Au!o-MDl/MDl-X, and PCI 
V2.2/2.1^ 32-bit, 66/33 MHz bus interface. Presto Gigabit 
supports IEEE 8023 lOBaseT, IEEE 802.3u 100BaseT, and 
IEEE 802.3ab lOUOBaseT standards. Presto Gigabit supports 
transmission rates of 10Mbps/20Ml’ips, lO0Mbps/2OOMbps, 
and 1000Mbps/2000Mbps. Tlie IRQ line and I/O addresses for 
Presto Gigabit are assigned by system. 





% 

Presto Gigabit 

like the Sonnet ATA and SA1'A cards, the Presto Gigabit can 
be used witii a wide variety of computet^ similar to the other 
cards. Check the 5onnet web site for specifics on your model. 
Presto Gigabit is compatible wit It above listed Mac cotnpatiljle 
computers running Mac OS X Version 10,2 or later. Presto 
Gigabit can also be used with Windows computers with 
available PCI slot, ninning on Windows 98SF., ME, 20(X), or XP. 

Presto Gigabit costs $89.95 and it comes witli 3-year 
limited warranty. 


http://wvtfVtf.sonnettech.cQm/ 
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Web Performance Testing 

Web Benchmarking 101 

A guide to stress testing your website with ApacheBench and JMeter 


Introduction 

Web perfontionce testing can be a daunting subject for the 
uninitiated. With the .sheer niimfKT of tools available and their 
various feature sets, it can Ix.^ hard to know where tc} Jxgin. In 
this article wc will explore the use of two popular open source 
Uk>1s, ApacheBench (aka ab) and JMeter, t() perform simple 
benchinarking tests. Kalher than going through the extensive 
feauire set offered by these applications, particularly JMeter, we 
will fcK’us on measuring the response time and the erfeciive 
tliroughput of your web application acrass different user load 
scenarios. Whether serving a few static pages or a fully dynamic 
site, the tools discussed will offer invaluable insight into the 
ijvenili fX*rformance of your web applications, and serve as a 
basis for isolating system ixittlenecks and conducting capacity 
planning for your wel) upplictitions. 

Benchmarking Considerations 

Although, the tests and Ick)1s that we will use in this article 
represent integral c'f)mp(>ncnis used in the testing prexe-ss, it is 
equally important to consider the environment in which such 
tests are perfcjrmed. If you are running a [x>pular website with 
signifiaint traffic, you may consider perf<>rniing bt?nc:hnuirks 
during ncm-pt^ak hours to obtain more accurate results and 
avoid rendering your server unusable to users. If passible, you 
should test your web server in a staged environment and iiefore 
actual deploytnenU Tins will enable you to adjust server 
parameters, install c'ache mechanisms, and oilierwise assess your 
site's perlonnance without intemipiing service. 

ApacheBench 

ApacheBench, a defat!Il comjxjnenl of the ApacJie Seivcr 
disiri)3Ution, is a simple command line tool, designed to measure 
the perfcjnnancc of Apache server. Preinstalled on Mac OS X, it 
is al)le to supply informaiton such as elapsed lime, requests per 
second, time per request, compression rate, transfer rate, and 
connection time under different conairrence scenarios. 

Tliough not an exhaustive list (see t!ie ah man page for 
more details), the following represents the most commonly 


used switches employed when testing typical usage 
scenarios with ah. 

• -n; Sj>ecifies the ruimixr t)f recjuests to pertbrm for a given 

test. Use this option to measure the time required to process 
a given numlxr of client requests. When used alone, without 
the option, ab does not pr<K'es,s requests conairrently. 

• -t: Specifies a linieframe. in seconds, to spend Ixnchmarking. 

This option is useful in determining the numl>er of requests 
lhat your server is able to process in a given amount tjf lime. 

• <: SfKX'ifies numlxr of simyltaneous connections. Of use in 

testing how your serv^T fxrfoniLS when multiple clients are 
hitting a given page at the same lime. *[’his s-wiidi may be 
used with either -ii or -t. to measure the loial elapsed time 
ret|uii'ed to prtxe.ss a given number of client reqoesLs 
siiiiultaneousiy, and the nuini)er of concurrent necjuesls dial 
may be prexessed over a set amoiini of time, resjKK'tively. 

• -g: Exports a "PSV (Tali Separated Values) file, which can lx 

imported inU) applications like Kxcel, GNUplot, and 
Mathematica for further amily.sis and/or graphic visualization. 

• -A; Used to supply username and password infonnation for 

site.s that require authentication. This enables you to conduct 
lesting on passw{)rcl-protetned sites. 

Having covered some of the basic parameters of ab, we 
will n<)w explore its use in ihe context of simple web 
benchmarking scenaritjs. 

For our firsi example, we will be measuring the time it 
takes to process lOtX) requests (i.e. -n lOtX)), from 10 
.simutiaiieous user connections (i.e. -c 10) against OS X's default 
user wellsite. Make sure Apache Ls running by lauru lung System 
Pfefet^nt:es and enabling personal web sliaring from the 
sharing preference pane. Once Af)ache is ainning, launch the 
Terminal application and enter the following command: ab -n 
loop -c 10 http: //loealh gg t to iiegin 
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ihe lx*nc’hm;)rk* When the comirand is executed the terminal 
will display the progress of the bendiniark run, as well as, a 
series of metrics (Tigure 1), 



Figure L Output of ab -n 1000 -c TO 
http://localhost/-estein 

Ik aware tliat when you ruji die ab coiiunand against a donmin 
or 11^ acidress the benclmiai k defauiLs to tlie site's home page; in this 
case, index.himl. To sptxify a piinkular page, simply point to its full 
jxith (e.g. http:y/localliQSt/-estein/MyDyn3micCQnt0nt>php ). This will 
allow you to test the performance of specific pages hosted by your 
site tn lenns of the amount of .stress they eiich place on the server. 
Tills is paniculariy iiti[x>[tanL when dealing will i siies tl ial liave Ixith 
static and dymuiiic content, ^lien testing dyn;miic jxiges keep in 
mind that ab repxirrs a tailed request when it encounters content that 
changes over Lime (e.g. dynamic data). As such, when running ab 
agaiast dynamic portions of ytxir site, you can safely ignore the 
“tailed requests" messages. 

For our next example, we w^ill be measuring the number of 
requests that am be completed within 60 .seconds (-t 60) with 10 
concurrent connections {-c 10). Enter the following command in 
die Terminal to execuLe this benchmark: ab t 60 c 10 
http: //localhost/^username The output of this 


command, .seen in Figure 2, differs from the first example in that 
-n is noi specified. When m is not specified, ah sets the number 
of requests to a default value of 50,000. It is imjx)itant to realize 
that, when using the -t switch, it is |x>ssib!e for the henclttmrk to 
complete, before the sfx^citled time period has elapsed, thus 
rendering the time variable irrelevant. Tliercfore, when using tfic 
-t and -n switches in tandem, it is important to consider whetliCT 
your finie variable exceecLs the time it rakes to process n requests. 



Terminal — ssh — S3 k4& 


•OGysTMi" estelnf cto - 

t 60 -0 10 http://localho£t/^tein 

s 

This is ApdChefiench, Stersiort '^ftevision: i.73 ap(iche‘.1..3 

Qipyright (c) 1996 Aden Zeus Techno logy Lta, httpi://4Fvw,zeuatech.net/ 

Copyright (c) 1990-36Ci2 The Apdohe ^Ttware FounOiBtitin, htt{i;//tfuv^cfKiche.cirg/ 


BenchwiriUng iocolhoat (be patient) 


Cowletod 5380 reguestt 



Cn^letod 13033 requests 

CoRipleted 15333 requentt 


Fif^taheu 1636S requests 
Server Softwore; 

Apodu/l .3.33 


Server Eiostne^: 

locolhost 


server Porti 

88 


ODOueent Path; 

/-catetn 


OooiHnt Length; 

276 bytes 


COncurrenoy Level: 

18 


Ti*ic taken for teete: 

62.174 seconds 


Ccwplete requests: 

1636S 


Foiled requests: 

3 


Brcken pipe enwe; 

3 


Nion-/)oc responses: 

lj6366 


Totol trtnsforrodx 

imm bytes 


HTML trv^erred: 

4517016 by tes 


Recfuests per secofid: 

263.21 It/ssc} (aeon) 


Tiue per request: 

37.99 [as] {«ean) 


Tins per request: 

3.88 [as] (aeon, across all ooncurrent requests) 


Transfer role: 

114.50 pOiybes/eec] received 


Dsnnnectioh Ttmea (■«) 



■tn ■eon; 

[+/-3d] Bedim box 


Cbnnect: 0 3 

0.4 0 U 


l^rocessinq: 6 2 

1.0 a 19 


Wultlng: 3 2 

1.1 2 19 


Total: 0 3 

i.2 2 19 


Percentage of the raqueste served utthtn a certolin tine (ae) 


WH 2 

66W 3 

TSJif 3 

SdK 3 

9m 4 

m 5 

909£ 0 

r 


99Jf 9 



t30X 19 (lost request) 

f 

■oeveTse:" esteinS | 




Figure 2. Output of ab -t 60 10 http://iocalhost/'^estein 


JMeter 

JMeter is a pure java appliaition, developed under die 
purview ()f llie Apache Jakarta project, wliich offers a wide array of 
lcx)ls fo!' benchmarking all manner ol‘ dient-serverbased 
applications. JMeter^s modular nrchiieaiire allows it to simulate a 
variety of load scenarios acro-ss multiple servers, networks, and 
objects. For the purposes of this article, however, we will only lie 
using a subset of JMetefs c^apabilities to [lertbrm basic load testing. 
For information on using JMeter to perform detailed performance^ 
measures on more ctnuj^lex web applications ycju may refer to the 
user guide at httD://iakana.aDache.org/imeter/LJsermanual/index.html 

Before we liegin, it is in.structrve to go over the major 
architectural components that constitute JMeter. 
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• lest Vhn: Defines the lest seciyence that JMeter will carry out 

during benduiiarking. 

• Thread Group: Used lo delineate speeific testing conditions, 

sucli as nu[nlx:T of concurrent users, tlie Thread Group plays 
host to all odier elements that comprise a test sequence. 

• Config Element: Responsible lor defining configuration 
information for the J>arnpler and Logic Controller elements. 

• Sampler! A type of conlrollcT that designates both die protocol 

type and nature of requests within a given test plan. 

• U>gic Controller: A controller element tirat determinc\s die 
sequence logic used by JMeter to initiate protocol requests. 

• Timer: Used to manage the latency aeros^s t|ueued user requests. 

• Listener: Responsible for recording and visualizing of test 
sequence data. 

Getting Started 

JMeter requires JDK 1.4 or higher to mn properly. Type 
java 'Version in the Terminal applioaiion u> discover wfiidi 
version of JDK is installed on your machine. Currently Apple 
5 uppUe.s Java 1.3T-1.4.2 Release 2 and J2SE 5.0 release 3 through 
regular .software updates, as well as, at the following links: 

hRp://wvvw.apple.com/downloads/[TiacQSX/apple/java 131 and 142release2 html 

httD://www.apple.com/dQwnlo ads/ macosxyapple/java2se50release3.html 

In our tests, both JDK versions were able to run JMeter 
without a hitch. However, you will likely ncHice some 
performance improvemcnl when using the J2SE 5.0 release 3. To 
specify this version as your system default or to change the 
precedence settings for your installed Java Virtual Mac:hines 
{^rVMs), use die Java Preferences utility located in 
/ Applicat ions/Ut Hit ies/Java/Java 2SE 5,0. 

’Hie latest version of JMeter is available a,s a free downlostd al 
http://jakarta.apache.orQ/site/download5/downlQads jmetercgi Deixaiding 
on your [^references, you can duwnlcxid the application as source 
code or binary as ether .zip or ,tgz archives. Ibe e^isiest option fV^r 
mo.sf OS X users will \yc to downkxad die binary in zip fonnat, 
whidt can lx.* c*asily uncoin[:>rcssed in the GUI by double clicking 
the j aka r ta ’ j me 1 e r - 2.1. X. zi p ardiive. ilie resulting 
j a ka r t a “ j TT et e r - 2.1 .1 foldei' can lx: placed in your 
Applications folder or oilier location witliin tlie filesystem. 
You can launch JMeter by either double clicking the 
ApacheJMeLer. jar tile, kxiated in the bin direentry of the 
Jakarta jmeter'2,1.1 foldcT, or l>y executing die jroeter 
shell .scrifX located in the same directory. Please note, that if you 
wish to nm j me ter from the cx)minand line you will need to 
make the .script exec:utable using the chmod command. For 
comniiind line interactive use, j>lease refer to the “Getting Started" 


section of the JMeter user manual: http://jakarta.apache.QrQ/ 
imeter/usermanual/get-started.html 




ApKhe JMeter 


EUc Ettii fiun ^ptinns Help 


^ [tS pianT" 

Works 


Test Plan 


Name: [Test Flan 
Cemmemf: 


User Defined Variables 


Name: 


"T" 


Delete 


Q Run each Thread Crnup separately 0.e. run one group 


Al 


Figure 3. J Meter's main window 


JMeter in Action 

In this example, wc will create a lest plan that simulates 10 
users initialing ,simultaneous requests to 2 different UliLs and 
wliich repeats the test ItX) times. Begin with the addition of a 
new ITiread Group by right clicking {or control clicking) the 
Test Plan element in the left pane and selecting Add >Thread 
Group. Next, select the Thread Group element to display its 
configuration window and set the Nimilx*r of Threads to 10 
(representing users), the Ramp-Up Period to 0 (to initiate all 
usc*rs at once), and the UK)p Count to 100. 


eea 

Apache JMeter 

file Edit gun 

^^piions Help 



T«sl Ptan 

2 Thread Gfunp! 
[i WorkBench 


Thread Group 

Name: Thread Group 

Action to be taken after a Sampler error 


Cnntlnde Q Stop Thread O Stop Test 


Thread Properties ——— - 

Number of Threads: j lO ~i 

I Ramp-Up Period dn secondsje j d 1 

Loop Count: □ Forever jlOO | 

'□Scheduler 


j[l. j a ; r 


Figure 4. Configuring Tliread Group element 


To add the next element of our test plan, HTTl^ Rcxjuc.st 
Defaults, right dick on the Thread Group clement, and select 
Add > Config Element > HTTP Request Defaults (Figure 5). 
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JobCapture 

Automatic Time and Expense 
Tracking Software 


JobCapture is intuitive, user-friendiy ciient-server 
software that inteiligently and automaticaity 
tracks working time and activity. Open a docu¬ 
ment in any appiication, and it is automaticaliy 
being timed by JobCapture. This guarantees that 
all work activity is recorded. 


JobCapture wiii increase productivity and your 
bottom line by providing accurate records for 
billing and anaiysts. Stop losing money now— 
Call today for more information; 973.763.9494 
Reps are avaiiabie 10:00am-5;30pm, EST. 


WWW. captureworks .com 


Capture Works 


• Perfect for ad agencies, 
design studios, architects, 
iaw firms, PR Firms etc. 

• Scalabie. Flexible. 

• Easy to configure. 

• Cost effective. Adding 
additional users is easy 
and inexpensive. 

• Tracks time and expenses. 


• Ciient and Server 
software is included. 

• Easiiy customized. 

• Reai-time data deiivery. 

• Customizable reporting. 

• View data numericaiiy 
or graphicaliy. 

• import/Export data to 
SQL, mySQL, XML etc. 
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I JDBC SQL Qufiy Oofanlts 
JHDI Defaull CDitnguriHon 
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LPAP Ocurntied Regtust Defaiuis 
fCP Sampler Canflg 


Figure 5. Add HTTP Request Defaults 

Select the HTTP Request Defaults icon under Thread 
Group and enter a server name (e.g. loadhost or PQDN) in the 
configuration window (Figure 6). 


660_ 

file EtJft gu« Options tjclp 


Apache JM«ter 


I Plan 

Thrirtad Croup 

jJlf http Requen Dffaul 
^klench 
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Figure 6. Configuring HTTP Request Defaults element 

Right click on the Thread Group element and then select 
Add>Samplei>HTTP Request twice, to create two HTFP 
Request elements, one for cacti web page. The Name and Path 
fields for each of die tri'lP Request elemencs should lie set to 
appropriate values. Fcir the purp<xse of this example, we will 
name tlie first HTTl^ Rc^iuest element home, and set its paili to 
'^username/index,html and name the second HITP 
Reqiiesi another and set its path to 
-username/another ,html (figure 7). 
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Figure 7. Configuring the "another” HTTP Request element 

Now we need to add a timer to pause each request for a 
random period of time, Ki^>ht dick on the Thread Group and 
ilien select Add>Timer>Gaussian Random Time, 

For the last element, we will add listeners I>y right clicking 
on the Thread Group element, then selecting 
Add>Listener>Aggregate Report. This particular listener lists, in 
tabular form, tlie response time, request count, min, max, 
average, error rate, and approximate number of request 
processe.s in seconds (e.g, Tliroughput), as well as, throughpui 
in terms of Kilobytes per second. You may add additional 
listeners, such as Graph Results, View Results in Table, and 
View Results Tree, depending on your requirements. 
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To Ix^gin the test plan, simply select Run>Sta!l from within line 
JMcicr menu Ixar. You will lx.‘ pn^mpted Lo save llie test plan, if you 
liaverit already done so. Duiiiig a successful run of your te^ pLin, you 
may dick on the Aggregate Report listener element (figure 8), or any 
(xher listener types you may have added, to view your dynamiailly 
upebted test results, liguie 9, for example, demonstrates some of the 
graphing functioas of JMeter s Graph Results listener element 
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Figure 8. Aggregate Report listener view 



Conclusion 

In titis article, we employed Ixjdi ab anci JMcLcr to “stress test" 
a kxully hosted site via simple load scemirios. 'Jlie amount of time 
a seiver takes to respond to clients’ mquests different load 
levels, i.s one of the most imfX)rtanL metrics for cvaluaLing web 
fx^rfomiancc, Thrt^ugh tiie manipulation of lotid test variables, such 
as the numlTer of concunenr reciuesis, and with refeientx^ to tcx)l- 
speciflc dita visualization pnx:esses, we are Ix-Htcr al>lc to ascermin 
the extent U> whidi these variables impaa a server's maximum 
sustiiinable kxtd. Such infonmttion Is critical for proper wd'JSiie 
imnagement, planning and evenmal perfomxince tuning. 
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TextMate 1.5 Review 


-- 

Macromates, the creators of TextMate, calls it “the missing ^ 
editor” with a nod to “The Missing Manuals” made popular by 
David Pogue. I would agree with their other tag line as well, that 
TextMate truly is “code and markup brought to the 21st century.” 
But what exactly is all the buzz about this text editor that popped 
out of nowhere to take Ruby on Rails developers by storm, and is 
now spreading like wildfire to other programmers, hackers and 
geeks alike? Let’s take a quick look at how I discovered it and then 
delve into the details that make TextMate so enticing. ^ 

Introduction 


[ firsi nolkcxl 'luxiMate in ilic ciiriy Fall of 20()5. I foutKl it by 
watcliing a Ruby on Hails scrcenaist which .seenietl to hard to 
follow as the developta- was so quickly making text snippets ap|:>ear 
on ihe st^reen and lyping over (and thnjugh) iheni. Although it UK>k 
some Lime anti scjiiie Cix>gling, 1 llnally figured out how text editor 
was lx?iiig used. 1 visited tlie TextMate web site, downloaded the 
30-diiy trial version anti started playing with it. Initially, f was excited 
with having ft)und soineiliing new and after rending the hy|>e on 
the web site, 1 felt like ilus niiglit be somediing tliat would 
reinvigoraie me. You know I tow, sometimes, you just need a new 
ap[>lieatiori for no [^articLilar leai.son. I lowever, after a day or two of 
playing with it (without reacling tlie manual), I clecided it wasn't for 
me -“ltx> much new siuffbf> Itnrn," I ihought. 1 was primarily using 
PHP, XHTML and SQL, and altliough it supfxtiled lliase languages, 
all the talk was Ruby Ruby, Ruby. 1 felt left out. 

Past-4b(ward to the winter of 2(X)S, when \ came across 
TextMate again, Tliis lime I nolieed it had growm up a bit, in facl., 
version 1.5 had just been released, so 1 decided to give it another 
try: 'Ibis time I lead the online manual and watched .some of the 
new^ s<:rtx.mi:asls to see how others weie using it. 1 was exlrernely 
impiessed with tlie pt^wer Ixdiind this young text editor ^so much 
so in fact, that 1 paid for it this time, and have Ix^en using it daily 
ever since. By leveraging the pcawer of pliig-'in-like mtHluIes tulled 
bundles and interfacing with ilie |X>wer of the UNIX comiiiand line, 
Allan Odgaiird had creiited a very capable application that could 
increase productivity all the while making it fun fo iLse. Yeah, drat s 
riglit, it’s simply fun to use. 
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Figure T. TextMate in action editing HTML code 


TextMate is biiili on bundles. In version 1.5 there are over 
30 bundles that define iiow TextMate l^ehaves For any particular 
file type or language. Faeh bundle contains any number of 7 
differeni types of items. These items consist (T commands, drag 
commands, inacms, snippets, languages, preferences and 
templates. All bundles (and their subsequent items) are 
completely customizable. You can edit wbat's already tlierc, 
creale your own or download diose created by other users, 
essentially making TextMate infinitely extensible. Mind you, 
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creating a TextMate bundle is not for the faint hearted, but, it is 
for geeks. Some of the default bundles include those that help 
you work with Apac:[ie, C, CSS, HTML, Java, JavaScripi, LuTeX, 
Markdown, Objective-C, Perl, PHP, PIIPDoc, Python, Hails, 
Ruby, SQL, Subversion, Textile, XML, and VAM1-. There are also 
more generic bundles that liandle ntm-language-specific tasks 
such us Dili, Source, UNIX Shell and Web Searches, Other 
bundle items assist with unit testing in hoih Java and Ruby. 

Bundle items are triggered in various ways thnjyglioul 
TextMate. Languages are automatically chosen based on the file 
suffix of the currently active file and the kx:ation of the insertion 
point within the file, but more on this lattT. Drag c tjmrnands are 
triggered w^hen a file is dragged and dropped into an editor 
window. Well see an example of this as well. Templates allow 
you to create new dfx’iiment.s based on their contents. 
Commands, macros, and snippets are triggered either from the 
gear menu (See Figure 2) at the lx>ttoin of any editor window or 
by typing text and/or typing special trigger keys. For example, 
in a PHP code block, typing the word foreach and pressing 
the lab key spits out an entire foreach ($variable as 
$key => $value) I } block of code. Even more amazing, 
is that, tlie word variable is pre-selected allowing you to type 
the real name of your variable over it. TextMate calls this 
functionality placeholders. Pressing tal> again selects key 
allowing the mne type-t^tver capability. ’Hiis functionality 
continues fc^r va Lue and the middle oftlie I 1 cliaraeiers. The 
bottom line is that you save over a dtjzen keystn^kes using this 


handy shoncuu TextMate Is filled with hundreds of these little 
enliancements to your personal workflow. 
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Figure 2. The gear menu showing text commands, 
macros and snippets. 


Let's take a look at a luiticlle in more detail to see what 
TextMate has to offer. 
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The HTML Bundle 

lilt* Hl'Ml bunciJe (‘iee Figure 3) is a gocxi example to 
discuss Ixrause many readers are familiar with HTML ami the 
bundle itself contains at least one of each aforeinerUioned 
bundle item. This will give you a good idea of not only what is 
possible with TextMale today, but, how you c^m extend it for 
your own needs. However, note that when you download 
lextMate and try it for yourself (and you will if you haven't 
already) you can easily explore other non-HTMf Imndles That 
make sense for the work you do. 
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Figure 3. The bundle editor showing some of the contents 
of the HTML bundle 

Commands 

ComtiKinds in 'I'exLMate aa" scripts inieq>a‘Led by Ixisli or 
w'hatever interpreter you spectiy^ including Perl, FHP or Ruiiy. 'I’he 
scri[)Ls can take the irntin' niment document, the seleaed text, or, 
notliing as input. 'Ibe cjuiput can apkice the current d<Kiimeni, 
replace the selected text, be shown as a tcxjl tij> or a variety u{ 
ixlier options including Ixing discunled altogether. Qjminands can 
also optionally save tlie docuinenl Ixfoie exc’cuting. As stated 
ctriier you can also set a key equivalent for any coimn;ind or a tab 
trigger (like our foreach example). Commands can also Ix" 
pmgrammed to a-quest user injiut much like AppleScript uses 
dialog lx>xes. Command progres.s can also lx disj^layed using 
percentage or barlufrsliop ix)Ie progress indicators. 

Commands arc very powerl'ul in that, they can execute any 
.script that you can call from the ctjinmand line Terniinai 
application, alongside complete interaction with the data in 
TexlMatc* You on fxrform tasks its simple as displaying Cor 
inserting) the uptttiie in a TcxlMate document, or, as complex ax 
grep-ing the seledecl line tif text for a zip code, acce,ssing an 
outside data source (such as a web site) to look up the name of 
the city and state for that xip code. The rest of the line of text 
can be verified, making any necessary corrections automatically. 
The po.sstbilities are praaically iiraitless, and, in essence make 
'I'extMate a very open application. Other amimancb built into 
I’exiMate include calculator functionality in the Math bundle, as 
well as software version control in the Subversion bundle. You 


am even control Apple's Xcode from TextMate with commands 
in the Xcode bundle. 

Looking at a specific example, in Figure 3 we sec tlie 
Validate Syntax command, wiiich can Sx triggered by typing 
conlnJ-shift-V or by selecting the item from the HTML submenti 
of the gear menu. You can sec that tJiis command consists of a 
c'all to the command line application cur!. By extracting tlie text 
of the entire drxiiment and passing it to die w3,oig website via 
curl and then disfilaying llte HTML results in a separate window, 
'I'extMate affords us a simple way (meaning no excuses) U> 
ch.ec:k ihe syntax of our HTML docuinents quickly. 

You may think that with so many commands and so many 
possible key equivalents that you will have iroul^le keeping it all, 
.straight. Well, the good news is that TextMiite is very intelligent 
when it comes to managing .scope. As we'll see in the definition 
of language items below, key equivalenis and uib iriggers only 
apply in the specific scope that the bundle determines. 
Therefore, the PHP fornach example we showed earlier will 
not work if you are in a SQL file, for instance. Given this fact, 
you c'an re-purpose key equivalents as appropriate. A perfect 
example is conirol-H. 'lextMate implements controi-H in a 
variety of bundles i<j kxik up dexumental ion for the .seleaed 
text. In HTML, controI-H kxiks up the selected clement on 
w3.org When friggered in a Perl file the selected text is kxiked 
up on peri.org No mailer where the dtKiimentation comes from, 
TextMate displays it in a separate window saving you a trip to 
your browser. However, in the case wliere you do use the same 
key equivalent for multiple entnmands, TextMate merely pops 
up a menu with all the choices ihrough which you can easily 
scroll, and make the proper selection. 

Drag Commands 

Drag commands are very similar to regular commands witJi 
the exception tiiai the metlKxl that triggers them is dropping a 
pank ular file type into a IVxtMaie ikx timent. For example, tlie 
IHML bundle contains a drag conimarKl named Insert Image 
With Dimeasions It is .set to trigger whenever the user drops 
a png, jpg or gif file into the dtx ument. When this occurs, the 
drag command is executed arnl insens a cxHiipleie img lag into 
the document with i^rc, heigtit, width and alt tag 
infomiaiion cntcrtxl auiomaiically. One of the many attentions to 
detail .seen throughout TextMate is apparent in this examp!e, in 
that, when you drag a file named figure_l.png the drag 
command cTcates an a ] t tag with tlie value Figure 1.” TextMate 
automatically converts the underscore to a space and properly 
capitalizes the text. 

This particular dmg comrrumd works by calling the sips 
ctmimand line tiKil built into Mar OS X to exiraci the height and 
width of the dragged file and llien inserts the completed img tag 
into the text file at the kKxition of the drop. One thing you will 
mxice by kxiking at the actual ccxle behind many of TextMate's 
commands is that it makes use of other command line tcxils (such 
as Perl, PHP and Huby) to parse text and |x^rfbrm other actions 
penineni to the uisk at hand. TextMate makes use of all of the 
available |X>wer under the litHid to make your w'ork easier 
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Macros 


Loreiii ipsum dolor sit amet, consectetur adipisicing elit, 
sed do eiusmod rempor incididunt ur labore et dolore 
magna aliqua. IJl cnini ad Tniaim veniam, quis nosirud 
exercitation ullamco kiboris nisi ut aliquip ex ea 
commodo consequat. Diiis ante iriire dolor in 
reprchenderii in volupiate velit esse dilum dolore eu 
fugiat nulla pariatur. Excepteur siiit occaecat cupidatac 
non proident, sunt in culpa qui officia deseaint mollit 
anim id esL labonirn. 

To insert the previous paragraph of text 1 inerely typed ilie 
word lorem and then pressed the tab key. 1'his is a very simple 
macro but the macro capability in TcxtMate is much more than 
tins, TextMate allows you to record a macro by selecting Start 
Macro Hecorditig from the Automatiofi meniL (.>nce macro 
recording has begun, it will capture all text editing, u-sage of the 
Find menu command, mnning other commands as discus^sed 
alx)ve, inserting snippets, etc. I'he macro will then appear in the 
bundle editor and allow you to attach it to whichever bundle is 
appropriate, as well as, set key equivalents, triggers, and other 
settings. Once a oiacro is recorded it cannot be edited. 

Snippets 

Nonnally when you iliink of a sni[)fxrt, you |)R>bahly tliink of 
a static piece of text tliat you can quickly insert in a document. 
Many limes this is done using copy and paste, a>pying the snippet 



from your repository of said .snippers and pa.sling it into your 
working doaiment. A.s you may expect by ntiw, TextMate takes 
this cxfxjacd functionality and spins it around a few dozen limes 
with little regaid for the fact that it may have just eaten. 

A snippet in TextMate can be .static text but it can also include 
code that can run wtien tlie snippet is inserted. Tlie sniptxM 
can also contain variables, such as the selected text at the time of 
the insertion. Ihis essentially gives snippers the ability to wrap the 
selection in whatever other text you so desire. Snippets can also 
contain placeholders for missing information winch you can then 
tab tlirough and replace, such as the PHP foreach example we 
dtsc'ussed earlier. Tl^e snippet can also peifonn Iranshjrmaticms on 
tlie data you enter witJiin tlie placeholder Tliese traasformatioas 
can lake the form of regular expressions, calls to command line 
utilities or execution of shell scripts. 

One particularly gcxxl example of using placeholders and 
transformations is in LaTeX, Coasider this, instead of typing the 
line of text \sectionl Introduction to 

Husic) Mabel (sec: int roduct ion_to_Trtusic 1, 
TextMate allows me to do the following: Type the word sec and 
press the tab key, lliis inserts the text \aection[section 
name 1 Mabel ( sec: section_name ) replacing where 1 
typed sec and highligliLs the words section name. I can then 
type over those words to set my section name, in tills case 
Introduction to Music. All the while 1 am typing the 
mixed-<‘ase text Introduction to Music, TextMate is 
inserting tire same text in all lowercase underscored format 
where the secticn_name text ap[>eared originally. Pressing 
tile tall key .selects the lowercase tinclerscdred version allowing 
me to type over tfiat if 1 so desire, and with a final tab pre.ss 
moves the insertion point to the next line. The bottom line being 
that lextMate allow^ed me to type in 27 chameters that in a 
normal text editor would have taken me 6^ characters. 

The h™l bundle contains numerous .snipjx^Ls tliat handle 
everything from inserting head, title, met a and script tags 
to tables, forms, anerhors, and embedding movies. For instance, 
typing the word movie and pressing tab, inserts 10 lines of ccxle 
with tlie src.of the movie pre-selected for you to replace if 
needed. Tabbing allows you to alter the variou.s parameters of the 
embed lag quickly and easily. Once you aeate a few fonns using 
this :ibhreviated entry methoti (typing and ta}:ibing) you will lie 
forever changed and save coiindess keystrolces, Not only does it 
make the tyfhng itself faster and more accurate, hut, also saves 
you from having to recall potentially oliscure attribute names 
within a lag since they are already included in the snippet. 

Languages 

Languages, or language grammars, are the items in a bundle 
ihat help TextMate decide whai^ within a bItK'k of text is a 
keyword, comment, variable, or string. Tlic information gleaned 
from this item allows for syntax lughlighting and to make the 
editor ,smart about which context the insertion point is located. 
As mentioned earlier, ilus is how TextMate knows when you 
type controk-II, if you are looking up an HTML tag or a PUP 
keyword, Unguage graiTimar.s are used to parse dcxaiments and 
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assign the jiropcr scrope to any particular position within the 
text. Hverywhere else lliroughoul TextMate, this information is 
used to narrow down fimctionality based on a panicuiar scope. 
Although delving much deeper into language grammars, is well 
beyond the scope (no [)yn intended) of this review, suffice it it) 
,say that TextMate olTers you tlie c:apal)ility to intplemenl any 
language that you may neetl that isn't already packaged with the 
product. For insiancc, if you have a CLtstom iexi-!yased file 
formal you can create your own grammar for it and fuilher 
create commands, macros, snipfjets, teiiipIaLes, and more, 'fhe 
language graiimiar item is the crux of the bundle. 

Preferences 

Frefenence items in a bundle are useful slK>uld you netxl la 
rrumipulate funaionality Ixiscd on s(x>pe within a dtxnmeni. For 
example, should you need to alter rmitching pairs of chanJCters 
(sucl) ;is limd I ) or patterns thit requite text to f>e indented or 
oiitdented, Ixised on where ymi lK*gin taping (such as for text witliin 
a fund ion declaration), this is the place to do it. Min<i you, TextMate 
doesn’t give yt>u tficx'kl'X)xes and pop-up menus to set these 
optioas. It’s all typing in text as in Figure X btrt the power is llicre. 

Templates 

lempJates ;irc shells of text that allow you to quickly creaic 
a new file based on the template, no surprises here, A bundle 
can contain any number of templates, for example, the HTML 
bundle coniaias ternpiates for XHTML 1,1, XHTML 1.0 Strict, 
XH fMI, 1.0 T'ransitional. and XHTMi. 1.0 Frameset dcKumenrs. 

Other Features 

Beyond the realm of bundles TextMate has dozens of otlier 
features. Some are staples, wliilc some are unique extras. Let’s 
take a look at ,s(>me of the highlights. 

Projects and Tabs 

TextMate supports the concept of a project. T!ic easiest way 
to work with projects is to rlnig an entire folder over die 
TextMate ia)n in your dock and TextMate will open a iabl>ed 
window with a project drawer open to die side. The project 
drawer displays the file hierarchy of your project folder and as 
you click on files in the drawer, opens them as mbs to lie edited. 
The tal>s can also be rearranged at will. 

Color and Style Themes 

TextMate suppons syntax higliligliting. including a very 
intricate engine dial allows you to choose a differeni font style 
for each scope selector. In reality this can make for some very 
busy color schemes, but, if used for gexx! and not evil you can 
come up widi some pleasing combinations as well. TextMate 
ships with a dozen or more themes and users submit themes to 
die Wiki on a regular basis. I lowcver, be warned, all of the time 
you save, actually using TextMate can l)c gol>bled up by 
tweaking die .settings in this pntference. 



Figure 4. The theme editor Folding 


Folding, the ability to coUapse portions of your 
document, is also available as can be seen in Figure 1. 
Note on line 3 diat the head tag is collapsed so you 
cannot see lines (j-10. However, hrwering your mouse 
cursor over die ellipsis icon will display the collapsed 
contents in a tool lip. Folding am come in handy if you 
liave sections of code, tliat do not need your attention at 
die moment, and, getting rid of tliem makes for less 
scrolling and easier editing. 'TextMate even remeinlx.TS 
foldings after a document is closed. 

Editor Pop-up Menus 

At the bottom of the editor window are a series of 
jKip-up menus including the gear menu, which gives 
acceas to commands, macrtxs, and snippets, as well as, a 
function pop-up that displays a parsed list of entities in 
the current document. I say entities lx.x:ause for source 
code diis might include classes, functions, methods or 
procedures, but, for HTML it may more likely contain 
element ids of divs and fomi inpuLs. 

Smart Typing 

TextMate has a Smart typing preference that can l^e 
enabled or disabled. This performs such tasks as balancing 
characters while typing, by in.serting matching closing 
chameters, Tliat is, if you type a fit will type the matching 
} for you and let you continue typing die text in lietween. 
Matching character pairs them,selves, are configurable via 
the bundle preference items for the current context. 
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Web Preview 

TexiMate has a built-in web preview window (hai 
uses WebKit built into OS X. This is no big deal really, 
and normally I wouldn't find myself using this feature, 
si nee I always have Safari and/or Firefox open when 
working on web sties. However, it does have one feature 
chat makes it very nice. I1ie refresh after change 
setting allows you to see changes U) your document in 
the web preview window as yt>u make them. 'Fhai is, as 
you type HTML code, the changes are immediately 
displayed, as they would appear in a web browser, 'iTiis, 
saves you having to change to another application and 
press the reload buUun wliile working on a table, 
stylesheet or form, and can be a big lime saver 

Filter Througli Command 

Another very powerful feature, is the Filter Tlirougli 
Command menu item (see Figure 5). This allows you to 
tyf^" in any command that can l>e executed in the 
lerminal application, and filter the selection or ilie entire 
d<K'ument tliroLigh that command. The output can be 
displayed back in tJie d<K'umeni, as a tool tip, in a wch 
preview winclow or in a new document. Need to sort a 
selection of coluinns? Simply run the selection through the 
£3ort coniinand. Need to add line numbers to the text 
itsell? Use the cat n comiiumd. Want to enciypt the text 
as base64? Use the openssl base64 command. The 
pn.ssibiliLies here, are endless. 


O 0 Q _ niter Through Command 
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Figure 5. The Filter Through Command dialog box 

MisccUaiieous Editing Features 

TextMate contains all sorts of nice editing features 
including columnar editing, spell checking, the ability to 
automatic:ally indent pasted text, overwTite mode, and 
clipboard history, allowing you to copy multiple items in 
a row, and then paste them in another dcxaimcnt in 
LlFO-style. Also, if you happen to he on the command 
line manipulating some files, and have a quick need to 


edit something in TextMate, simply type maze 
filename, and llie TextMate command line helper 
application will oj>en die file in 'fexiMale for editing. 

But What’s Wrong With It? 

TextMate is not |Xfrfect, altliough ii might .seem like it. It 
is young, and lias some growing up to do. 1here are a 
handl'ul of tilings that T personally have trouble witli, 
including the fact, tliat it's a little slow with really laige files, 
and it takes at least a split second for syntiLx coloring to take 
elTcct, whenever you open any siise file. lextMate only 
sup[X)rts tabbtxl windows wlien using wiiai it atlls a project, 
this makes using taNied windows, when editing remote files 
via SFTP impossible, unless you mount the remote server as 
WebDAV or some such. But tlien, that ends up Ixing ux) 
.slow for real work in many cases. It doesn't supjXJrt splitting 
windows. Some of the langiuige tlefinilions still need . 5 c.>me 
work (XML, for example) but since these are user-ediUible it's 
iiard to complain alK>ul soinetliing like that. Sometimes the 
.smart typing is not my kind of smart, .so IVc disabled it in my 
copy. Also, every once in awhile I'll aime across a series of 
text that doesn’t quite jrarse projxdy, usually when there are 
nested commenLs or aimnieiits in different languages in the 
Siime file. However, in tlie two di.stincl crises 1 can necLiVl, it 
wiLs a matter of changing die comment style frofn / * * / to 
/ / (for exjimpie in PHP), and it fixed it even thoiigli /* */ 
woiked elsewl iere. With all of I he t hings Uial TextMate does 
right, I'm w'illing to live with die .shortcomings Ix-^ciiLse die 
developers are very res|x>asive to feedlxick, and I expect in 
due time these Issues will be addre.ssed. 

Conclusion 

It may take .some [practice to Ix^come proficient, using 
'lexiMale. Having s:iid that, it is al.so a fresh look at the 
future of text editing. Text Mate lakes text editing to a new 
level. 'Ihe keylxiard-orieiited power of editors, like vi and 
emacs, with a Mac OS X giapliical user interface, allows 
you to find tiew ways to optimize your work habits, alnujsl 
every time you usc^ it. If you have trouble along tlie way, 
there is a growing 'lextMate community available for 
support on the weh, via email and IRC in the ff^exlmate 
conference room. Also, die tjnline manual contains many 
details on how to make the most out cjf all of the features 
reviewed in this article, plus more. If you value your time, 
and editing text is t rucial to your work you .should give 
lextMate a l(.K)k. At 39 Euros, and a free 30xiay trial you 
have little to lose, except a few thousand keystrokes. You 
can learn more alx>ut TexiMate at http://www.macrOfnates.com/ 

_ ^ 
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APPLESCRIPT ESSENTIALS • by Benjamin Wwaldie 


Introduction to 




SCRIPTING tILElviAKER FRO 


■■ or the past couple of columns, we have discussed various ways 
to store and access data using AppleScript. One column 
* provided an introduction to Database Events, a background 
application in Mac OS X 10.4 and higher, which allows AppleScripts to 
interact directly with SQLite cUitabases for the purposes of storing and 
accessing ckita. Another column explored methods of storing and 
accessing data in script properties and property list files. This month, 
we are going to continue discussing data storage and access, this time, 
using FileMaker Pro, a tliird-party commercial datiibase application. 



For ihc piiqxjses of following alon^ with this mtinth's 
roluma. tl' yt>u do not own FileMaker Fro, you can 
download a fully functional 30-day iriat from 
http://www.filemaker.com/ 

All AppleScript cckJc 
covered in this month's 
column was written and 
tested wilh FileMaker Fro 
version 8,0.1. Therefore, 
some of the AppleStTipt 
terminolo^^y discussed, 
may not function wilh 
older versions of 
FileMaker. 

A f'ileMnker Pro 
database, named Su/xr 
Ifemes, is referenced 
ihrt>ughout this month's 
column. See figure 1. You 
may downkxtd a cx>py of 
this daUibase from 
httD://www.automatedwDrkflow5.com/f [les/de mQS/MacfECH.Q3 .Q 
6.Example.zip TliLs example database is password protected 
with an acetjunt name of Admin and a jyjssword of henm. 


Working With Databases 

Accessing and Opening Databases 

The first thing we will 
disc:uss, is general database 
interaction, When scripting 
FileMaker Fix>, the first thing you 
will prcjbably warn to do, is 
make sure that your target 
dalahast^ ts t>jx.med. 'litis can lx: 
(lone Ity first checking Kj see if 
tite database exists, as 
demonstrated by the following 
exam|)le code. 

tell application "FileMaker 
Pro** 

databas^e "Super Ueroea" axiifls 
end tell 
-> false 


Tf the desired ditiibase is 
not opened, then you may need to write code to open it. 
Tills is done by using the open command, followed by the 
path to the database file that you warn open. When u.sing 



Figure 1. Example FileMaker Pro Database 
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the open command, you may optionally specify values for 
the Accounts and passwords parameters, if the database 
requires an account name and password. These parameters 
are pluralized because the open command may also be used 
to open one or more database files. If multiple databasSes are 
to be opened, tlien a list of databases, along with a list of 
account names and pas sword may he passed to the open 
command as parameters. 

The following example code demonstrates how to open a 
single database with a specified account name and password. 


end tell 
-> 3 

The following example code demonstrates how to retrieve 
the name of every opened database. 

tell applieatiQD **FileMaker Fro" 
name of every database 
end tell 

-> l“HyDBl,fp7\ "MyDB2.fp7'\ “Super Heroes.fp7'’1 


FileMaker Scripts 


set theDatabase to 
choose file with prompt 
"Please locate a 
FileMaker Pro rtatabase 
file to opent“ 

tell application 
"FileMaker Pro“ 

open tbeDatabaae for 
Accounts "Admin" with 
passwords “heroes" 
end tell 


In some cases, your 
database may already be 
opened, but may simply 
be hidden from view, or 
be behind another 
database. To show a 
database, or bring it to 
the front of any of other 
visible database 

windows, you may use 
the show command. 

For example; 

tell application 
“FileMaker Pro" 

show database “Super Heroes" 
end tell 

While FileMaker Pro has a show command, it docs not have 
a liidc command. However, FileMaker Pro will allow 
AppleScript to Interact with its menus, with the use of the do 
menu command. Using this method, you can hide a database 
by triggering the Hide Window menu item, which can lie found 
under the Window menu. The following example code 
demonstrates how to do this. 


In addition to 
s u p p oi t i ng Apple Seri pi 
interaction, FileMaker 
Pro also has its own 
internal scripting 

capabilities. 'I'hrough 
FileMaker Pro’s 

interface, you can 
create scripts, and 
attach them to a 
database. FileMaker 
Pro scripts can be 
triggered in a variety of 
ways, such as when a 
database is opened, 
when a user clicks a 
button, and so forth. 
l*hese scripts are not to 
be confused with 
AppleScripts. Again, 
they are internal to 
FileMaker only, and 
cannot interact with 
external applications or processes. See figure 2 for an 
example of a FileMaker Pro script that will display a custom 
dialog message, using values from various fields in the 
dataljase. 

As you liegin automating FileMaker Pro, you will lean that 
some tasks cannot be automated using AppleScripi alone. For 
such tasks, utilizing a combinatian of AppleScripts, and 
FileMaker Fro scripts, can usually get the job done. FileMaker 
Pro scripts c^an be triggered from AppIeSt ripi with the use of a 
do script, command. For cx 2 impie: 



Figure 2. An Example of an Internal FileMaker Pro Script 


tell application "FileMakei: Firo" 

do menu menu item "Hide Window" of menu "Window" 
end tell 

A count command may be used to determine the nu!iil>er 
of currently opened diitabases. dhis includes any opened, bur 
hidden databases. For example: 

tell appltcation “FileMaker Pro” 
count databa:^e£^ 


tell application “FileMaker Pro" 
activate 

tell database "Super Heroes" 
do script "Test" 
end tell 
end tell 

Figure 3 shows die result of using AppieScript to trigger the 
custom dialog FileMaker Pro script iim was shown in Figure 2. 
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FileMaker Pro scripts aiH also be configiireti to trigger 
AppleSeripLs. Thb is done through the ase of a Perform 
AppleScript FileMaker Pro script. See figuie 4 for an example of 
a Perform AppleScript script that triggers AppleScript code to 
empty the trash in the Finder 



Figure 4. An Example of the Perform AppleScript 
FileMaker Pro Script 


Tables 

Prior to FileMaker Pro 7, a database file was comprised of 
a single table of data. FileMaker Fro 7 introduced the ability 
TO include multiple tables within a single database file. 
Because tjf this, if you are scripting a datalrase thai contains 
multiple tables, you may need to specify the table, with which 
you want to inreract in your database. This can be done with 
the following syntax. 

tell application “FileMaker Pro" 
tell database "Super Heroes" 
tell table “Super Heroes" 

- Add code here 
end tell 
end tell 
end tell 


By dehiiilt, if no table is specified, then any cx>mmands sent 
to the database will lx: direcLed io tlic first table in the database. 
This is demonstrated in the following example code. 

tell application "FileMaker Pro" 
tell database “Super Heroes" 

- Add code here 
end tell 
end tell 

Therefore, if your database contain.s only a single table, 
tlien it is not necessary to specify a table in your AppleScript 
code^ Kather, it is noderstocxl that all commands will be 
directed to the first table in iliis database. 

Throughout this column, we will refer to our siimple 
database witliout specifying a table. '^Tliis is because, our sample 
daiairase docs noi contain muliiple tables. 

Working with Records (Part 1) 

Now iliai we have discussed databa.se interaction, tables, 
and scripts, let's move on to the central focus of scripting 
FileMaker, intemetiag with the records of a datalxtse. When 
scripting FileMaker, you will most likely want to extract data 
from, or, ]X)]>ulate data into the records of a dacal?ase during 
execution of your script. Let’s take a \mk at records. 

Accessing Records in a Database 

lb count the records of a database, you can use the count 
command in the same way that we counted opened databases. 
For example: 

lell application "FileMaker Pro" 
tell database "Super Heroes" 
count records 
end tell 
end tell 
-> 3 

Please note tliat the ccxie above will return the total number 
of records within the entire specified database. I’hat said, many 
times, you might not want tc> count ihe records the entire 
datalrase. In some situations, a find inay have lieen f:)erfonned 
in the database, and you might want to determine how many 
records are contained within the current fcjimd subset of 
records. To do this, i^ither than referring to the database class 
when counting records, you can refer to the document class. 
For example: 

tell appiicfitlon "FileMaker Pro" 
tell document "Super Heroes" 
count records 
end tell 
end tell 
-> 1 

Distinguishing l^etween the document and database 
class, OkU sometimes .seem a bil ctmfusing, but here are some 
general mles for when you should use each constnid. When 
you want to refer to records within the scope of the entire 
database, you should utilize the database class. When you 
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want to rufer to records within a found subset of records only, 
you should utilize the docuinent clas^s. 

To navigate to a specific record in a dakibase, you may use 
the show cointnand. For example, the following code will 
locate and display the second record in the entire database. 

tell application "FileMaker Pro"* 
tell database ''Super Heroes" 
show record 2 
end tell 
etid Lell 

In the example code above, we sjiecified an index number 
for the targeted record, in this case 2. An index number refers to 
the beginning to end p(>,sili{:ming of a specified item. In this case, 
a record with an index numiDer of 2 refers to the second record 
in the database. In many cases, locating a record by its index 
may meet your needs. However, keep in rtiind tiiat a record’s 
index number may diange in certain situations, such as when a 
previous record is deleted. For example, if we were to delete the 
first record in my ckitalrase, then record 2 would [)ec:ome record 
1, and, therefore, it would have a new index numlx^r. 

In FileMaker Pro, records also contain unique record It) 
numbers, Thejse ID nnmlxjrs are imemal i<> FileMaker, and are 
assigned to recoixis when tliey are creatcxl. Once an ID has been 
iissigned to a lecord, it will not change. Therefoie, a more acaimte 
way of refeiring to a record would lie to use its ID. To determine 
Llie ID of a given rec:ord, you may access tJie ID property of that 
recoKl For example, the following ccxle will retrieve the ID 
number of the .second lecord in the specified datalxcse. 


tell appllcatlciijni "FileMaker Pro" 
tell database "Super Heroes" 

ID of record 2 
end tell 
end tell 
-> 3.0 

Once you have the ID number for a record, then you may 
refer to that record by using Its ID. For example, the following 
code will find and show' a specified record, using irs ID, railter 
than its index numl}er. 

tell application "FileMaker Pro“ 
tell database "Super Heroes'* 
show record iE 3.0 
end tell 
end tell 

Creating Records 

In some cases, rather than accessing an existing record, you 
may need to create a new record in a database. This is done 
by using the create command, and specifying in wliich 
daial)ase you would like to create the record. The following 
example code demonstrates the proper usage of this t'ommand. 

tell application "'FileMaker Pro" 

create new record at database "Super Heroes" 
end tell 

) record id 4»0 of table "Super Heroes" of database "Super 
fieroes.fp?" of application "FileMaker Pro" 

As you can see from the code above, the result of the 
create cominund, is a reference to the newly created record. 
1’his information could lx? placed into a variable for later usage 
in your scripl. 





The #1 Open Source Database Management Tool 
in Town — Navicat for MySQL 


Navicat is the industry leading GUI Client for the most popular open source 
databases. The Cross Platform capability and Ease of Use of Navicat give you the 
flexibility and convenience to manage and develop your database. Navicat allows 
database devebpere/ administrators to be more productive by providing an 
intuitive graphical user interface to MySQL and PostgreSQL. 

With Navicat, you can use a single, Industry's best-selling tool for both develop¬ 
ment and database object management on: Windows. Mac OS X and Linux. 
Managing multiple databases on your local/ remote server Is easier than ever! 

Navicat Migration Tool lets you import MS Access, Excel and other most popular 
file formats to the database. Other utilitarian toots such as Data Transfer, Data 
Synchronization, Backup and Report will empower you to work more efficiently. 

With Navicat Batch Job Scheduling feaiure, you can sit back and let Navicat do the 
rest for you! 
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Deleting Records 

There may also lie times when you need lo delete records 
in your databa,se, 'Diis can lie done by using the delete 
command. The following code demonstrates how to delete a 
specific record of a specified database, 

tell applicatioo "FileMaker Pro'' 
tell database "Super 
delete record 3 
end tell 
end tell 


S|3ecific record wiiliin that database, 'I'his can iilustraied 
through the following two code examples. 

This first example will count the fields wiiliin our sample 
database. Since there are 8 fields in this databasep the result of 
this example code is a value of 8. 

tell application ''FileMaker Pro" 
tell database "Super Heroes* 
eonnt fietlds 
end tel] 
end tell 

-> a 


As another example of the delete command, the following 
code will delete every record in a found subset of records, 
witliin the S[x:eified database. Notice that, since we want to 
interact with a found subset of records, the document class is 
referenced, rather than the database class, 

tell application "FileMaker Pro" 
tell document "Super Heroes" 
delete every record 
end tell 
end tell 

Working with Fields 

When manually creating a FileMaker datalvase, one of die 
first things you will do Is add fields for the diflferent types of data 
that your datahise will hokl. For example, our sample database, 
Super HerxK^s, cron tains Name, Secret anti P^m'ers fields, 

among others. FileMaker lint's AppleScript dictionary defines two 
chisses for use when interacting with fields. 

First, a field class pertains to the actual fields within the 
context of a datalxise itsedf, and not within the context of a 


This next example will attempt to count the fields within a 
specific* record of our sample database. Since fields arc not 
contained by record-s^ this ccxle results in a value of 0, 

tell application "FlloMake^- Pro" 
tell database "Super Heroes" 
tel 1 record 1 
count fields 
end tell 
end tell 
end tell 
-> 0 

The second class that is defined for inieraction with 
fields in a database, is the cell class. In FileMaker Pro, 
daiahases coniatn fields and records. Records contain cells, 
which contain data and correspond to fields. The following 
example code shows that counting the numfier of cells 
with in a specified record in our sample database returns a 
value of 8, 

tell appHcation “Fllj?Hijker Pro" 
tell database "Super Heroefi" 
tell record L 
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count cells 
end tell 
end tell 
end tell 
-> 8 

Retrieving Field Contents 

Now ihai we have disciis.sed different ways to refer to fields, 
let's discHiss liow lo retrieve data from fields. *ro retrieve the 
contents of a field within the scope of a single reccird, reler to a 
specific cell tbss contained wtihin that reexjrd. For exaiiiple, 
tlie following axle will retrieve the value of the Name field for 
the first record in our database. 

tell up|)llcatlon "FOf^Hsker Pe:o“ 
tell datiibuse Hnfoes** 

tell record 1 
cell "Name’' 
end tell 
end tell 
end tell 

**Superunn^ 

As you can see by ihe code aljove, it is not actually 
necessary to reference a parameter of a ceil in order lo 
retrieve the cell's value. Simply referring it> the cell itself will 
result in the value of that celh Ollier meihods of requesting 
a cell's value include, using the get data command, as 
well as accessing the cellValue property of the cell 
class. For example: 

get data coll “Name** 

Or; 

cellValue of cell “Name** 

To retrieve a field value From multiple records at once, you 
may refer to the field class within the scope of a database 
itself, rather ifian a record. For example, the following cxkJc will 
relum the value of the Name field for every record in the 
specified database. 

tell application **HleNaker Pm** 
tell database “Super Heroes" 
field “Name" 
end tell 
end tell 

-> I“Superman", "Spiderroan", “Batman"I 

Again, in this siamtion, referring to the document class 
rather than the database class would allow us to access 
records within the found subset of rea)rds, rather than within 
the entire database. The following example code wiD return the 
value of die Name field for every record in the found set of ihe 
sfxfcified database. 

tell application "FileMaker Pro" 
tel] document “Super Heroes" 
field -Name" 
end tell 
end tell 

—> I " Supe tmati" * " Splde rnun" 1 

Fields also have properties, which may be of use to you 
as you script FileMaker Fro. For calculation fields, a 


foriDula properly' may be referenced to retrieve the 
calculation text for the field. For fields that have been 
assigned a value list, such as the Potvers field in our sample 
datalmse, the contents of that value list may be retrieved by 
referencing the choices property of the field. The 
following code demonstrates how to retrieve a value ILsi for 
the Powers field in our sample database. 

tell appHcntinn “FileMaker Fro" 
toll document “Super Heroes" 
choices of field "Powers" 
end tell 
end tell 

(“Flight**, "Martial Arts", “Peak Physical Condition**. 
“Spider Sense". "Spider Webbing", "Super Breath". “Super 
Hearing**, “Super Speed**. “Super SLtenglh", ’*X-Ksy Vision") 


Populating Fields 

Now, lets discuss how to populate fields with data. 'Itie 
following example c<xic demonstnites how to set the values of 
multiple fields within in a given record, 

tell application "FileMaker Pro" 

set theRecord to create new record at database “Super 
Heroes" 

tell thekecord 

fifit cell "Name" to “Batman" 
set cell “Secret Identity* to “Bruce Wayne* 
end tell 
end tell 

AppleScript can alst> be u.scd to f>opLilate container fields 
with images and other types of data using this same 
teclinique. To populate a container field witli a file, set the 
value of the cell to the path of the desired file. For example, 
the following example code will prompt the user to select a 
photo of Wonder Woman. It will then create a record for 
Wonder Woman, populate some text fields, and insert the 
chosen photo into the Photo container field. 

set thePbotpPatb to choose file with prompt “Please select a 

photo of Wonder Woraan;" 

tell application “FileMaker Fro" 

set theRecord to create new record at database “Super 
Heroes** 

tel1 theRecord 

set cell “Name" ta "Wonder Woman" 
set cell "Secret Identity" to “Diana Prince" 
set cell "Photo" to thePhotoFath 
end tell 
end tell 


Working with Records (Fart 2) 

Now that we have discusised basic record and field 
interaction, let's return to records again. Two primary tasks that 
you may want to automate in FileMaker Pro using AppleScript 
are, performing finds and sorting records. 

Finding Records 

Tliere are two ways to find recc>rd.s in a database. The first 
is to make use of the show command. The following example 
ctxle demonstrates how to use this command to find and 
display all of the records within the specified database. 
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tell application '‘FileMaker Pro” 
tell database "Super Heroes" 
ahov every record 
end tell 
end tell 

To find ^nd display records that match certain field 
values, you can still use ilie shov? command, l-lowever, 
you must spedt^'^ the criteria for what you would like to 
find. This is done using the whose dau.se, and 
.specifying the field you want to search, along with the 
value you want to locate within that field. For example, 
the following code will find and display every record in 
our sample database with a vaJiJe of Superman in the 
Name field. 

tell application "FileMaker Pro" 
tell database "Super Heroes" 

show (every record whose cell "Name'' ^ 
"Supennan") 
end tell 
end tell 


A similar code variation can he used to search for 
records using multiple fields and values. The code below 
denionsLrates this technique, 'rhis code will search our 
sample database for any record wiih a value ot Superman 
in the Name field and a value of C7ark Kent in the Secret 
Identity field. 

tell application "FileMaker Pro" 
tell database ‘'Super Heroes" 

show (every record whoiie cell "Name" = 
"Superman" and cell '‘Secret Identity" = "Clark 
Kent") 
end tell 
end tell 
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Another method of finding records is to make uj5e of 
FileMaker Pro's find requests. When you perform a find 
in FileMaker manually, by selecting Find Mode from the 
View menu, a new find requCsSt is created. You can then 
enter search values for any desired fields witliin the 
request. Additional find reciuests may also lie added, if 
desired, and even omissions may lie specified. This c:an 
allow you, for example, to perform a find for every record 
where field x contains a specific value and field y does 
not contain a specific value. See figure 5 for an example 
of a find request in a FileMaker Fro database. 



Find retjuests may also be created using AppleScript, 
and are represented by the request cla.ss. To create a 
new find request, use the create command. Once a 
request lias been created, jnuch in the same way that you 
set field values for records, you may specify field values 
for the fields witliin find reciuest. Once ail field search 
values have l)een specified, you may then Issue the find 
command to j:jerlbrm a find using any current find 
requests. 

The following t:c^de will perform a find by creating a 
find request. Pricjr to creating the request, any existing 
requests will be deleted, ensuring that no previous 
requests are included in the search. Once this find 
request has been created, search criteria are specified by 
setting values for certain fields within the request. Next, 
the find command is issued. 

tell application "FileMaker Pro" 
tell database "Super Heroes" 
delete every request 

set theFindRequeat to create new request 
tell theFindHeque.«3t 

set cell "Kame" to "Superman" 
set cell "Secret identity" to "Clark Kent" 
end tell 
find 

end tell 
end tell 

Like performing* a find manually, AppleScript can 
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create multiple requests prior to issuing a find 
command. The following example code will delete any 
existing find requests, and create a new request for any 
records with a value of Super Strength specified in the 
Powers field. Next, a second request will be created 
that will omit any records witlj a value of Flight in the 
Powers field. The find command will llien be issued. 
So, in other words, this code will perform a find for 
any records in the database that have a value of Super 
Strength y but nor a value of Flight specified in the 
Powers field, 

tell application '^FileMaker Fro” 
tell database "Super Heroes” 
delete every request 

set theFindRequeet to create new request 
tell theFindRequest 

set cell "Powers” to I“Super Strength"! 
end tell 

set theFindRequest to create new request 
tell tbeFitidRequest 

set cell “Powers" to | “Flight**! 
set omitted to true 
end tell 
find 

end tell 
end tell 

Using the techniques menUoned above, AppleScript 
can fie used lo perform virtually any type of find in 
FileMaker Fro, regardless of liow complex. 

Sorting Records 

Sorting records is anotlier impe^rtant task when 
wT>rking with datalxises in FileMaker Pro, At limes, you 
may want to son the records wathin your database, based 
on data within certain fields, 'rhis can lie done by using 
the sort command, and specifying the fields and order 
that you wotilci like to use for sorting. The following 
code demonstrates ilic proper syntax for performing a 
single field ascending sort of our sample database, using 
tfie values contained within die Name field. 

tell application “FileMaker Pro“ 

tell current layout of document "Super Heroes” 
sort by field ‘*Naine" in order ascending 
end tell 
end tell 

To son the rectircls of a database using multiple son 
criteria, the sort commancl may be passed through a list 
of fields, as well as a list of values for the in order 
property. For example, the following ccxle will sort the 
database first ascending by the Name field, and then 
descending by tlie Secret Identity field. 

tell application "FileMaker Pro" 

tell currenL layout of document “Super Heroea" 
sort by tfieId "Name", field "Secret Identity"I 
in order (ascending, deacendltigj 
end tell 
end tell 


You may have noticed tliat the sort examples 
above, reference the current layout of the dociiment 
class. FileMaker Fro databases may contain multiple 
visual layouts, or designs, and the sort command 
recjuires a reference to a specific lay out Rather than 
referencing a specific layout by name, the code above 
simply references the current layout of the document. 
Please note that, when referencing a layout for sorting, 
the layout must display the fields that are referenced 
in tJie sort. 

In Closing 

This month's column should give you a basic 
understanding of sc'ripEing FileMaker Pro. While there are 
other solutions availalile for data storage and access, 
FileMaker Pro provides a mbusL rtHational ckitabase 
system, along with a very user-friendly visual frrint end. 
FileMaker Pro mtikes it easy to design simple or complex 
databases, and writing scripts that interact with those 
cbtabases is fairly easy too. 

FileMaker Pro is a frequent choice by many users for 
storing and accessing data in their automated workflows. 
Workflows involving FileMaker Pro often include 
prcKcsses such as catalog atitomatitjn, data archiving, 
desku^p publishing, digital photograpli storage and 
organization, and more. For complex processes such as 
tliese, the ability to write AppleScripts to help manage 
and streamline the workflow Ls essential, and can allow 
for great efficiency and processing power. 

To further your knowledge of FileMaker Pro, be sure 
to visit the FileMaker Pro website at http://wwwdilemaker.com 
As mentioned earlier in this month's column, a fully 
functional 30’cby trial of FiicMaker Pro is available for 
download from this site. For additional information al>ouL 
AppleScripling FileMaker Pro, check out the Apple Emnts 
Reference database is installed with FileMaker Pro in the 
English Extras > Apple Etfenis folden 

Until next time, keep .scriptingt 
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Mod your iPod 


Ffom High €a|>actty Batteries to <3SM, Other World Computing has you covered i n 
keeping your iPod looking stylish as wdl as getting more playir^g time. 



iPod Replacement Batteries 
& Enrichment Products 




^ iPod Replacement Battery Kits 

Easy to Install Tools Included + Online 
i Installation Videos. Get up to 78% 
more capacity & 20+ Hours Runtime! 


iPod 8aneries 
for nearly every 
Apple iPod 
Starting From 

$14.99 


1 






iPod cases 


Not comhjrtablfl 
opening your iPod? 

Fof S3® + the cost of the 
hanery, OWC iristalh itfor 
you - IPod shipping 8ojc and 
fedE* Overnight covered 
todnd from! 

mac seles.com/iPodi n^tall 

NuPovifcr' 


^Si^SSSV 



Music on your Mac 

macsatei .co mAmuiic 

t Large StudloProd DesktOj 


Nova Large 
Capsule Cardiold 
Microphone $99,00 


Desktop 
Audio Powered 
Monitors $149,00 



Trigger Finger MIDI 
Controlier Input 
Device $199.00 


Ozone USB Audio 
8 Midi Contfoller 
Knobs $249.00 


5SisvTr..ja» niacsales.com 

Shuttle A/V Controllers 



Shuttle Pro v2 
Jog/Shunle 
ns program¬ 
mable buttons] 

$84.99 


0 


Shuttle Express 
Jog/Shuttle (5 
programmable 
buttons) $89.99 




Instant Music 
^ for Mac $41.99 


EyeTV Video Encoder/ 
TVTuner/Digiial Recorder 

$149.99 

EyeTV 200 $295.00 
EyeTV 500 Kigh-Definitlon 
$339.00 



iir u 

(MJSllMMiSib 


amnutm 


s 


owes full Nm 
of IPod Oattsiifli,, 
Acc*&s«ri«s, and 
more online at 
maesa les.comnpod 


tuj e r* tectinalagiii 
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RoadTrip & RoadTrip Plus 
Listen to your iPod on-the-road! 
Finally, an easy to use and GREAT 
sounding FM Transmitter for your iPod! 
Just plug, tune a single station and jam 
on without interruption. Easier to use 
and sounds better than products costing 
2 times as much! 


R0fitiTrip!4 

FM Transmittfri 
+ iPod Charger 






RoadTrii^ 




Only 

$25.99 


RoadTripf 


r Tom Keating of 

f/ * TMCnei.tom had thts to 
«y About the Roa<nVip1+ 
"The RDacTTnoFi- FM 
Modulator worked 
flAwlesUy,^ sod E was very 
impressed with 
“ ^ “ the sound quality ‘ 


\ 

iViji 


*0 




RoadTrip! 

FM Transmitter 
Few ALL Apple tAods 
Only 

$14.99 





Pay less. Get more. Surf fasted 


Mac-Only 

Internet 


from only 


5 


per month! 


High-Speed Nationwide Dial-up 
and DSL Services 
Toll-Free Tech Support & More 
from Mac Experts 

Visit FasterMac.net or call toll free 
800-869-9152 to learn more or to sign up. 



Software 

Apple OS X ‘Tiger' $99.00 

fuff retaii box ventorj 

OSXia2,10Jfiom $17.99 


I 


^^P^tFacto ^ 

marc sIbc. V ■..i-.i* 



macsales.conVoix 

i i 

I 

» il ifp Apple iUfe 06 

$ 1^11 ^^ Make the most out of 

yo u r d igital I ife. Sha re 
'i?: NEW! the magic of your 
' I life '06 everyday with iLife 
^ $79.00^ '06. Only $79.00 


www.macsales.com 






Mac Improvement 

Laptop Batteries 

/ly neuier* tiri.f .nalogy ; 

NuPower- 

Batteries that Run Longer and 
Last Longer! Sulk in the USA and 
Built Right for up to 5S% more M 
runtime vs. your original Apple 
Stock Battery! 

PowerBook G4Ti from $139.99 
PowerBook 12/15/17* from $129.99 
f8ook G3/G4 from $119.99 

Call or Visit macsales.com/NewerTech 

Laptop Screen Protectors 

Protect your screen! There's an OWC Laptop 
Screen Protector (LSP) product for your Mac. 
Pow(>rBcH>kG417“ $17.99 
PowerBook G4 15" $17.95 
PowerBook G3 15" $14.99 f 1 

iBook/PowefBookG4 12" $13.95 ||4l 
IliF OWC UPi air imdiifin nrt, giflw »h 
prstKton lhal pmritt polMriiaUf ^rntianMif mart! 
wkkh wn lr«n ihf li«:i]ud and keyboard while 

3(Wf lafjtopndned. 

Network Adapters 

PUN®! 

Sonnet Preito 10/100/1000 

Gigabit Ethernet PCI $85.99 

PRAM Batteries 

Is your Mac forgettiEig what time it is? 

OWC PRAM batteries starting at $4.99 

Wireless Mouse 

Logitech Cordless 'Click' Optical Mouse 
for USB - $15,99 


O'Reilly Books 

The latest Mac titles 
from $9.95 OmUJWar 
TillHlnStori! 






lii 


Mac mini upgrades 

Max you r Mac mini Mernory 

1 4 from $87.99 Per Gig! 

m / 7 > minis flick" V 2 

* From $79.95 

Get a Bigger Faster 
Hard Drive from $95.99 . j— 

Monitiitaftthal i apftt iimFmlpff ' 

BumOVDs&CDsfor only $119.99 
fix m Hntfiet «firtrt (K teE flJ Appif'f (ufittn 

Exclusive OWC Online Video shows how lo insull lliese Mac 
mrni upgrades or for $99 including overnight pickup and 
return delivery. OWC wlli do the Mac mir^l upgrades for youl 
Call or Visit inBCsales.com/macmini 


The Latest Enhancements 


Village Tronic VTBook 

Add another CRT pr Flat P.mef Display to your 

Puwcfbook $ 244.99 


i Lugger tMac cases 
fur the iMact^ Of for Mac mini and/or up 
to ZO" LCD Display 5 color combinations 
starting at 999.95 


Rain Design 1340^ 
A Turntable for your 
iMacGS irandZO** 

S 39.90 



Eye UHiikKfDr 
[I jfMiiMjt,SiK 



























www.macsales.com 









Explore with your G4 


owe Stocks the full line of G3 & G4 Processor- 
upgrades by these leading manufaaurers: 


OMfC mm 


! uae F* t c-t^ f 1 alng y j 


G4 Single Upgrades from $195.00; G4/1.6GHz only $249.00 
Or Crank it up as high as a Dual 1.8GHzfor $595.00! 


G4 Upgrades for PovsrerMac G3s, PowerMac G4s, 

Cube G4, PowerBook G3s - 

Even Legacy PowerMac 7200-9600 Models! 


mi 




“ More Speed for Less Cost 

• Use all your existing mernory, 
peripherals, etc. 

- Plug & Play and 20OM 

- Works with the Latest Software 
& OS X Tiger too! 

• Makes your current Mac like 
new again! 


I 


\ 

30 Day - 
Money-Back ^ 
on NewerTech ^ 


- and owe brand 
Mi upgrades! tfoA 




Give us a call or 
check out our 
website. Our 
compatibility guide 
will show just what 
I options are right to 
make your Power 
Mac, PowerBook, 


iMac, etc - a Faster Mac today! 
800.275.4576 macsales.com/Faster 


ATI MacEdition 
Performance Video Cards 


When your Mac is Fast, Don't let a 
SLOW video card hold you back! 

PCI Video Upgrade for Performance 

or Additional Displays: 

ATI Radeon 9200 
W/12EMB for any 
Mac with an Available 
PCI Slot S127.95 
Up to 2048x1535 
resobtton. 

Compatible with up to 24* 

Displays! 


Oilier VUorlO Oonwuting ] 

vv Mdi (Inmne wKe 

www.niac»Ales..com - E00^27S,4S76 I 


owe is the Apple Upgrades Expert! We know how to make your Mac 
a Faster Mac. And it's really amazing too - with a new processor, your 
Mac can be like new again - even better than new as it's possible for 
it to be FASTER than even a brand new Mac too. With 30 Days to try 
and a full 100% refund if it's not for you - you've got nothing to lose 
except that spinning beach bail. 


High-Performance AGP Video 
Card Upgrades 

*A1I of the following 
support up to 
two displays* 

ATI Radeon xSOO 
MacEdition 
with2S6MBS449.00 
TOP OF THE LINE G5 
VIDEO Card supports up 
to Apple's 30* Display! 

For PowerMac G5 Only. 


For all PowerMac G4 
Models; 

ATI Radeon 9600 $65.00 

Up to 256MB of High-Performance 
Video Memory 

For4X and 8X AGP G4, GS models 
Support for up to two Apple 30* 

Cinema Displays! 

Quanz Extreme. Tiger Core Video 
Accelerated 
Fot Power MatG4 Digital Audio. Quicksilver. 
Mlrrored-Drlve Door, and all G5 Models. 


NEW! ATI Technologies 
RADEOM 9800 PRO MAC 
IDITION $259.00 
Ultra High Performance Dual 
Head Video 
Card W/DVL VGA and 
S'Video Ports, 

256MB. New, for 
PowerMac G4s. 

Quartz Extreme, Tiger Core 
Video Accelerated 


Fricci, s^ecrhutloni iwl svillibiUty AKiiifaJeittflfluBgewitliHilnaUH.IfenfTEtumErwftMrtJQ day; iht be Hibi«cl ta a reftBcking fee. 
Mfl reiuni wilC N accepted withmt llerdiindUt Aulhtrkiiif i«n nimber. 


OlkerWo^ldCenipHling 
t«M Coirtauids ifiMrtHi, IL «Wlf95 
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□Work Longer? □ Work Harder? 


How to Stop 

Racing the Clock 


13^ Energize Your Mac! 


We know your day keeps getting longer and longer. With every release of software, your Mac is 
bogged down even more. With every dick, there's a pause. You find yourseif working longer, working harder. 
A faster Mac means that you can work fasterf not harder • be more productive! 


Let the original Mac Performance Shop help. Daystar has been creating Mac speed for over 16 years. 
Whether your bottleneck is storage, connectivity or just raw CPU speed, we deliver the performance you 
need, where you need it. 



CPU Upgrades for Raw Speed. We upgrade any Power Macintosh, 
any iMac Flat Panel, any PowerBook G3 and some PowerBook G4s. 

Fast and Large Storage for Real-Time Video. Our TURBOSAT/I 

solutions can make your drives perform itke RAM. Projects open in a 
flash and edit in real-time. 

Extreme Wireless. Wireless is great, unless you're getting slow 
transfers. Even Airport Extreme's are siow when the signal is weak. 
Daystar can boost your signals and energize your wireless network. 

But, if You Really need a G5? Daystar Is the only Mac Performance 
Manufacturer that is also an Apple Authorized Reseller. Not only can 
you trade-in your system for the latest and greatest... but the Daystar 
Pro's can upgrade It for maximum performance! 

Call 877-439-8646 and beat the clock. 

Authorized Reseller 


\ \ \ V ■ VVr TECHNOLOGY 


Daystar Technology - Your Macintosh Performance Shop 

5018 Bristol Industrial Way, #202, Buford, GA 30518 USA 
Toll Free: 877-439-8646 or 770-614-5400 


Daystar-Tech.com 


Oaystar-Forum.com 


Daystar-Store.com 
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